1. Controller and scope
This notice applies to the public informational website https://pro.creselio.com.
The controller is Laurent Bouhnik, an individual operating under the commercial name Creselio, at Carrer de la Portaferrissa 19, 4-2, 08002 Barcelona, Spain.
Privacy contact: hello@creselio.eu.
This notice covers visits to the public website and correspondence sent to its contact address. It does not govern future broker workspaces or borrower-document processing.
2. Personal information and purposes
When you visit the website, the hosting and security infrastructure may process your IP address, technical request information, browser and device information, timestamps and security events.
The website is hosted by Vercel. Supabase supports the website through a server-side registration-status check. Existing authenticated sessions may also trigger authentication verification or refresh.
We use this information to provide the website, maintain security, prevent abuse and diagnose technical problems. The lawful basis is our legitimate interest in operating a secure and functional website (Article 6(1)(f) GDPR).
When you contact us by email, we process your email address, any name you provide, the content of your message and related correspondence to respond to your enquiry. Depending on the circumstances, the lawful basis is our legitimate interest in responding to enquiries (Article 6(1)(f)) or taking pre-contractual steps at your request (Article 6(1)(b)). Applicable legal obligations may also require processing under Article 6(1)(c).
3. Analytics and cookies
The verified marketing-site implementation does not use Google Analytics, Google Tag Manager, advertising pixels, session replay or optional behavioural-tracking scripts.
The website uses a language-preference cookie when a visitor expressly selects a language. Necessary authentication cookies may exist for previous sessions. Further information is provided in the Cookie Notice.
4. Service providers and international transfers
The following services may process personal information in connection with the public website:
- Vercel: Website hosting, technical processing and observability.
- Supabase: Supporting backend infrastructure, registration-status checks and authentication where applicable.
- Arsys: Hosting and receiving email sent to hello@creselio.eu.
- Microsoft — Outlook.com/Hotmail: Incoming messages received by Arsys are also automatically forwarded to a Microsoft-hosted Hotmail mailbox used by the operator to monitor and respond to correspondence.
Email forwarding means that your email address, message content and any personal information you voluntarily include may be held by both Arsys and Microsoft.
The Microsoft destination is a consumer Outlook.com/Hotmail account governed by Microsoft's applicable service terms and privacy statement. We do not represent it as a Microsoft 365 business mailbox.
Arsys provides the Spanish-hosted email service. Microsoft may store or otherwise process data in the European Economic Area, the United States or other countries where it operates.
Vercel and Supabase publish data-processing and international-transfer terms. Microsoft describes safeguards for international transfers, including European Commission standard contractual clauses and applicable adequacy mechanisms such as the EU–US Data Privacy Framework. These statements do not mean that all processing takes place exclusively within the EU or that every provider operates under the same contractual arrangement.
You may contact us for further information about relevant international-transfer safeguards.
5. Retention
Vercel Observability Plus runtime logs are retained for 30 days. Other technical and security information is retained according to the applicable operational requirements and provider arrangements.
We retain correspondence while necessary to respond to enquiries, manage related follow-up, meet applicable legal obligations or establish, exercise or defend legal claims.
These criteria apply to correspondence held in both the Arsys mailbox and the forwarded Microsoft Hotmail mailbox. Messages are reviewed and deleted when their relevant retention justification ends, subject to applicable provider deletion processes and lawful exceptions.
We do not claim a fixed deletion period for all records held by Arsys or Microsoft.
6. Your rights
Subject to applicable conditions, you may request access to, rectification or erasure of your personal data, restriction of processing, data portability or object to processing based on legitimate interests.
Contact hello@creselio.eu.
You may also lodge a complaint with the Spanish Data Protection Authority (AEPD): https://www.aepd.es.
You can browse the public website without providing your name or email address. Providing contact information is voluntary, although sufficient information is needed to respond to your enquiry.
7. Current service limitations
Public registration, new-customer workspace access, borrower-document processing and Gmail sending remain disabled for this initial marketing release.
No automated mortgage-approval or creditworthiness decisions are made about website visitors.
This notice will be updated when additional processing activities requiring new disclosures are introduced.
Last reviewed: 9 November 2026.