Last updated: October 20, 2026
Who handles your data
Data controller: Augusto Cardús, real estate advisor at Century 21 Wilson-Chihan, Asunción, Paraguay.
Contact: WhatsApp +595 971 628 111.
What data I ask for and why
- Inquiry about a project or a property: first and last name, and WhatsApp or phone number. Optional: email, what you are looking for (to live in or to invest), unit type, bedrooms, approximate budget, timeframe and message. I use them to answer your inquiry and follow up on it.
- “Sell your property”: first and last name, WhatsApp or phone number, whether you want to sell or rent, property type and city. Optional: neighborhood, the price you have in mind, email and message. I use them to assess whether I can market your property and to contact you.
I do not ask for documents, title deeds, contracts, income or bank details through the website. Along with your inquiry, I record the page you wrote from, the page you entered the website on during that visit, and the date and version of your consent.
Visit source. If you arrived from a campaign link (for example, an ad, a post or an email), your browser stores during that visit, without cookies, the campaign parameters (utm: source, medium, campaign, content and term) and the page you entered on. They are deleted automatically when you close the tab and are only sent, together with your inquiry, if you fill in and accept the form. They do not include personal data. If you arrived from a Facebook or Instagram ad, the page address includes an identifier for that click (fbclid). This website does not store it before you choose: if you accept advertising on that same page, or had already accepted it, it is moved to the _fbc cookie; if you choose another option or keep browsing without choosing, it is discarded.
Cookies and third-party services
- Your cookie choice. The cardus_consent cookie stores what you chose in the notice, so your decision is respected. It lasts 180 days. It is necessary and does not track your browsing.
- Analytics (optional). If you accept it in the cookie notice, I use Google Analytics 4, through Google Tag Manager (services of Google LLC), to find out which pages and projects are visited and how the website is used. If you decline, these tools are not loaded. Google acts as the service provider: it receives technical and usage data (for example, the page visited, the type of device and browser, and the IP address needed for the connection) and processes it under its data processing terms, including in the United States. I do not send it your name, phone number, email or the text of your inquiry: they are not included in the page address or in the analytics events. I have turned off Google Signals and the Google Analytics options for sharing data with Google for other purposes (products and services, modeling, technical support and recommendations).
- How long analytics cookies last. If you accept analytics, Google Analytics stores the _ga and _ga_R4SVMBQ0HY cookies in your browser. They last up to 2 years and the period renews with each visit. This is how long they last in your browser; how long Google keeps the data is explained under “How long”. If you accept advertising, your browser stores Meta’s _fbp cookie (90 days) and, if you arrived from a Facebook or Instagram ad and accepted on that same page or had already accepted, the _fbc cookie (90 days), which contains the identifier of that click.
- Maps. Google Maps maps are only loaded if you click “Load map”. Before that, the location is shown as text, with a link to open it in Google Maps. If you load the map or open the link, your browser connects to Google, which receives technical data such as your IP address and processes it under its own privacy policy.
- Advertising (optional). If you accept it in the cookie notice, I use the Meta pixel (Meta Platforms, Inc.), through Google Tag Manager, to measure whether my ads on Facebook and Instagram bring visits and inquiries, and so that Meta can show them to people who are more likely to be interested. Meta receives technical and usage data: the page you visited, the project you looked at, whether you tapped WhatsApp or sent an inquiry, your device and browser type, your IP address and its cookie identifier. If you have a Facebook or Instagram account, Meta may link this data to your account. Meta processes it under its own terms, including outside Paraguay. I do not send Meta your name, phone number, email or the text of your inquiry, and I do not use advanced matching. If you do not accept advertising, the pixel does not load.
Changing or withdrawing your choice. You can do this at any time from “Cookie preferences”, at the bottom of every page. If you withdraw your consent to analytics, the page reloads without Google Analytics, this website’s analytics cookies are deleted and nothing else is sent from that moment on. Anything sent before is kept until its retention period ends. If you withdraw your advertising consent, _fbp and _fbc are also deleted and the pixel stops loading.
Legal basis
Your consent, when you tick the box on the form. Project updates are only sent if you tick the separate box, which is unticked by default; you can unsubscribe at any time. Analytics with Google Analytics, only if you accept it in the cookie notice. Advertising, only if you accept it in the cookie notice. The cookie that stores your choice is necessary to respect it.
Where your data is stored
- Your inquiry first reaches the website’s server (Spaceship, the hosting provider).
- It is recorded in Zoho CRM (Zoho Corporation), my client follow-up system, which uses Zoho’s data center in the United States.
- Once Zoho confirms the record, your personal data is deleted from the website’s server. If Zoho is unavailable, the inquiry stays on the server until it can be recorded, for 30 days at most.
Who your data is shared with
I do not sell your data or pass it on to third parties so they can offer you their own products or send you advertising. Only the following have access to it:
- Technology providers: the website’s hosting (Spaceship) and Zoho CRM. They process your data on my behalf and only to provide me with their service.
- Analytics service: if you accept analytics, Google (Google Analytics) receives technical and usage data from the website, without your name or contact details.
- Advertising service: if you accept advertising, Meta receives technical and usage data from the website, without your name or contact details.
- Developers: if you inquire about a project, I share with the developer only the data needed to move your inquiry or transaction forward (for example, to confirm availability, reserve a unit or prepare the contract), and I let you know beforehand.
- Authorities: only when a law or a competent authority requires it in a specific case.
The Century 21 Wilson-Chihan office has no automatic access to my personal CRM.
How long
- On the website’s server: until Zoho confirms the record, or 30 days at most.
- In Zoho: for as long as the business relationship lasts and up to 2 years after the last communication, unless you ask for it to be deleted sooner.
- In Google Analytics: the data from each visit (events) is kept for 14 months from when it is recorded. Data linked to your browser’s identifier (user data) is also kept for 14 months, and that period starts again if you use the website again. Aggregated statistics, which do not identify anyone, do not have that limit.
- At Meta: under its own terms; I do not control this.
- Cookie storing your choice: 180 days.
Your rights
On WhatsApp you can ask me to see what data I hold, correct it, delete it or stop receiving updates. I reply within 10 business days.
Security
Encrypted connection (HTTPS), admin panel with restricted access, CRM credentials stored outside the public website, and protection against automated submissions.
Changes
If this policy changes, the new version is published with its date. Consent version: consent-v3.