Private Office: terms of use and data protection
Last updated: 22 October 2026
This English version is a courtesy translation. In case of any discrepancy, the Spanish version prevails. Read the Spanish version (Private Office: condiciones de uso y protección de datos).
In short: your documents are assessed by an artificial intelligence system. A person only sees them if the system has a doubt. We do not use your documents or your data for marketing, and we delete the files as soon as the verification is complete.
This document has two parts: the terms of use of the Private Office (part I) and information on how your data are processed during verification (part II, articles 13 and 22 of Regulation (EU) 2016/679, GDPR, and Spanish Organic Law 3/2018, LOPDGDD). It supplements the general Privacy Policy of the site.
Part I. Terms of use
1. Service provider
| Provider | Mirko Banno (Ibiza Beyond), sole trader (autónomo) |
| Tax ID (NIF / NIE) | Y3194712A |
| Address | Carrer de sa Creu 30, 07800 Eivissa, Illes Balears, Spain |
| Contact | info@ibizabeyond.com · +34 656 560 937 |
2. What the Private Office is
Ibiza Beyond works only with off-market properties: properties whose owners do not want them to appear on property portals or any information about them to be circulated. ibizabeyond.com only shows anonymous teasers (no address, no identifying photographs and a price band), with the energy rating required by law.
The Private Office is the reserved area where a buyer registers, proves their identity and financial capacity and, once verified and after signing a non-disclosure agreement (NDA), requests information on the properties they are interested in. On the owners' instructions, we give no information that could identify a property until both conditions are met: verified proof of funds and a signed NDA.
3. Who may use it
- Adults acting in their own name, or on behalf of a company or another person with sufficient authority.
- One account per person. Registration data must be true, complete and up to date.
- If you act on behalf of a company or a third party, we may ask for documents proving your authority.
4. How access works
- Registration on ibizabeyond.com and buyer profile.
- Upload of a valid identity document and a recent proof of funds (bank certificate or letter, account or portfolio statement, or financing approval). If you buy through a company, also a company document.
- Verification (section 5). You will only see the status: verified, under review or suspended.
- Electronic signature of the NDA.
- Request for information on a specific property. Each request is authorised by Ibiza Beyond in accordance with the owner's instructions.
- Access to the property information and, where applicable, a viewing, always accompanied.
The verification remains valid while the documents are in force. For properties priced above the funds shown, or after some time, we may ask for an updated proof of funds.
5. Verification
Your documents are checked automatically: technical checks of the file, reading of the document by an artificial intelligence system, and assessment of the images by a second artificial intelligence system that looks for signs of forgery or AI generation. The details of what is checked and of your rights are in part II.
- Verified: the documents are consistent and there is no sign of manipulation. Your proof of funds is approved and the files are deleted.
- Under review: the system has a doubt (for example an expired or barely legible document, or an old proof of funds). A person at Ibiza Beyond reviews the case and may ask you for another document.
- Suspended: there is a serious sign of forgery (section 6).
The verification is only used to decide access to off-market information. It is not a certificate of solvency or identity for third parties. If you make an offer, we will also apply the customer due diligence measures of Spanish Law 10/2010 on the prevention of money laundering (identification of the beneficial owner, source of funds and others); you will be informed separately at that time.
6. Forged or manipulated documents
It is forbidden to submit documents that are forged, altered, generated or modified with artificial intelligence or editing software, or documents of another person without being authorised to do so.
- If the system detects a serious sign of forgery, your account is suspended at once: you will not be able to request or see information on any property.
- A person at Ibiza Beyond reviews the case within 24 hours at most. During that time you can explain the situation from your area or by writing to info@ibizabeyond.com.
- If the reviewer does not confirm the forgery, the suspension is lifted.
- If the reviewer confirms it, the account is closed, all access granted is revoked and an irreversible fingerprint (hash) of your e-mail address, telephone number, document number and files is kept to prevent new registrations (part II, section 9). Forging documents may be a criminal offence; in that case we may report the facts to the authorities.
No account is closed for good without a decision by a person.
7. Confidentiality
All information on an off-market property is confidential and its use is governed by the NDA you sign before receiving it. In particular, you may not circulate, publish or share it with third parties (except your advisers bound by professional secrecy, on the terms of the NDA), contact the owner directly, or photograph the property during viewings without permission. The documents we provide may carry marks that identify the recipient.
8. Your obligations
- Provide true data and documents of your own, and keep them up to date.
- Keep your login credentials safe; the account is personal and non-transferable.
- Not use the Private Office for purposes other than searching for and buying a property, nor try to access information you have not been given access to.
9. Price
The Private Office is free of charge for buyers. If you instruct Ibiza Beyond to search or act on your behalf, the fees will be agreed in writing in the corresponding engagement form before the service is provided.
10. Property information
Property information comes from the owners and is for guidance only: it is not a contractual offer and is subject to availability and change. We recommend that you check the legal, planning and technical status of the property with your own advisers before any commitment.
11. Liability
Ibiza Beyond provides the service with the diligence of a professional in the sector and is not liable for damage arising from false data or documents provided by users, from misuse of login credentials, or from service interruptions beyond its control. Nothing in these terms limits the rights that the law grants to consumers.
12. Closing and suspending accounts
You may close your account and ask for your data to be erased at any time by writing to info@ibizabeyond.com. Ibiza Beyond may suspend or close an account if these terms or the NDA are breached, following the procedure in section 6 where documents are concerned.
13. Changes
We may change these terms to adapt them to changes in the law or in the service. We will tell you in your area or by e-mail before the changes apply to your account.
14. Governing law and jurisdiction
These terms are governed by Spanish law. If you are a consumer, the courts of your place of residence have jurisdiction; in all other cases, the courts of Eivissa.
Part II. Data protection during verification
1. Data controller
Mirko Banno (Ibiza Beyond), NIF Y3194712A, Carrer de sa Creu 30, 07800 Eivissa. Contact for any data protection matter: info@ibizabeyond.com.
2. Data we process
- Buyer profile: name, e-mail address, telephone number, buyer type (individual, company or representative), company, nationality, country of residence, budget band and purchase timeline.
- Documents you upload: identity document (front and back), proof of funds and, where applicable, company documents.
- Data read from the documents: name and surname, document number and type, dates of birth and expiry, nationality, machine-readable zone (MRZ); issuer, account holder, date, amount, currency and IBAN of the proof of funds.
- Technical file data: the software used to create or modify the file, internal dates, provenance labels of AI-generated content (such as C2PA or IPTC) and a digital fingerprint (SHA-256 hash) of each file.
- Verification result: the signals detected, the assessments of the AI systems and, where applicable, the reviewer's decision.
Your identity document includes your photograph. We do not use it to identify you biometrically: we do not perform facial recognition or compare your face with other images, and we do not ask you for a selfie. We do not process special categories of data.
3. How the verification works
- Technical checks of the file: the real file type, the software used to create or edit it (for example, a graphics editor behind a bank letter is a sign of manipulation), changes made after creation, and the labels that AI generators insert in their images.
- Reading of the document by an artificial intelligence system, which extracts the data and points out visible signs of manipulation.
- Consistency checks: check digits of the document's machine-readable zone (ICAO standard 9303), IBAN validity, expiry, age of the proof of funds, whether the name matches across your profile, your document and the proof of funds, and whether the funds cover the property requested.
- Assessment of the images by a second artificial intelligence system, which judges whether a document appears forged, generated or modified with AI, or photographed from a screen.
- Blocklist: we check that your e-mail, telephone, document number or files do not belong to an account previously closed for forgery, and that your files have not already been used in another account.
With these elements the system assigns one of the three outcomes in part I, section 5. A person at Ibiza Beyond accesses your documents only when the outcome is "under review" or "suspended", and only while the case is awaiting their decision: access is technically restricted to those cases.
4. Purposes and legal bases
| Verifying your identity and financial capacity before giving you confidential information, and handling your access requests, which are recorded in our client management system | Pre-contractual steps taken at your request (art. 6.1.b GDPR) |
| Detecting forged or AI-generated documents, preventing fraud and protecting the owners' confidentiality, including the blocklist | Legitimate interest (art. 6.1.f GDPR and recital 47) |
| Automated assessment of your documents (section 6) | Your explicit consent (art. 22.2.c GDPR), which you may withdraw at any time by asking for manual verification |
| Due diligence if you make an offer | Legal obligation (art. 6.1.c GDPR; Law 10/2010) |
| Keeping evidence if a forgery is confirmed | Legitimate interest in establishing, exercising or defending legal claims (art. 6.1.f GDPR) |
5. What we never do
- We do not use your documents or verification data for marketing, or to build commercial profiles.
- We do not sell them or pass them on to third parties, unless required by law.
- They are not used to train artificial intelligence models, neither by us nor by the providers that help us with the verification.
- Your contact details are only used to handle your requests and to propose the properties you have asked us for. We will not send you marketing communications unless you expressly ask us to, and your verification never depends on it.
6. Automated decisions and your rights
The verification outcome is decided by an automated system, which may temporarily prevent you from accessing off-market information. We therefore guarantee that:
- a suspension is always provisional and is reviewed by a person within 24 hours at most; no account is closed without a human decision;
- you can ask at any time for a person to review the outcome, express your point of view and contest the decision, from your area or at info@ibizabeyond.com;
- if you prefer, you can ask for your verification to be carried out directly by a person instead of the automated system; in that case your documents will be seen by Ibiza Beyond staff.
For security reasons, we will not tell you which specific checks your case triggered while it is open, but we will give you the reasons for the final decision if you ask.
7. Recipients and data processors
The following providers take part in the verification as data processors, under a processing agreement in accordance with article 28 GDPR. None of them may use your data for their own purposes:
- Supabase Inc.: database and private storage of the documents, on servers in the European Union (Frankfurt, Germany).
- Anthropic, PBC (United States; Claude API, commercial service): reading of the documents. Anthropic does not use this content to train its models and keeps it only for a limited time, mainly to prevent abuse.
- TypeSafe AI, Inc. (United States), provider of the Jev model: assessment of the document images.
- Hostinger: private server hosting our electronic signature system (DocuSeal) for signing the NDA.
If a forgery is confirmed, the data may be disclosed to the police, the Public Prosecutor or the courts. Under Law 10/2010, to the Spanish Financial Intelligence Unit (SEPBLAC) where the law requires it.
8. International transfers
Anthropic and TypeSafe may process data outside the European Economic Area, in particular in the United States. These transfers are covered by the European Commission's Standard Contractual Clauses (Implementing Decision (EU) 2021/914) included in their processing agreements and, where the provider is certified, by the EU-U.S. Data Privacy Framework.
9. Retention periods
| Document files and their images | Deleted as soon as the verification ends with a positive outcome or a rejection for quality reasons. If the case is under review, kept only until the reviewer's decision. |
| Minimal verification data: document type, expiry and nationality; amount, currency, date and issuer type of the proof of funds; outcome and date | For as long as you keep your account, so that we do not ask you for the documents again. Erased when you close the account, unless required by law. |
| Profile data | For as long as you keep your account. |
| Documents and evidence of a confirmed forgery | Blocked (art. 32 LOPDGDD), available only to the courts, the Public Prosecutor and the authorities, for the limitation period of any actions that may arise. |
| Irreversible fingerprints (hashes) in the blocklist: e-mail, telephone, document number, files | 5 years from the closing of the account. |
| Due diligence records, if you make an offer | 10 years, as required by Law 10/2010. |
10. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, withdraw your consent and exercise the rights in section 6 by writing to info@ibizabeyond.com. If you consider that your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
11. Security
- Documents are kept in private, encrypted storage that is not publicly accessible.
- Ibiza Beyond staff can only open a document while your case is under review, through a temporary link that expires after 5 minutes.
- The blocklist does not store your e-mail, telephone or document number, only irreversible fingerprints (hashes) that let us recognise them if they are used again.
- You only see the status of your verification; the technical details of the checks are not shown in your area.
12. Do you have to provide the data?
No. But without an identity document and proof of funds we cannot give you access to information on off-market properties: you will still see only the public anonymous teasers.