Madrid Residents Discover Their Faces Stolen for Property Listings

A woman living on Calle de Embajadores in Lavapiés found her apartment interior-photographed during a routine rental inspection in 2024-duplicated across at least four unrelated property listings on a major Spanish letting platform. She had never authorised the images. She had not even known they existed online. She is not alone.

Across Madrid's most pressured rental districts, a pattern is emerging. Residents, small shopkeepers and community organisers say photographs taken of them, their homes or their businesses are being lifted and reused-by rental agencies, short-term tourism operators, and third-party advertisers-without consent and, in several cases, with falsified addresses or prices attached. The problem sits at the intersection of Madrid's two dominant civic crises right now: a housing market under severe strain and a tourism boom that city planners have repeatedly struggled to regulate.

The issue has sharpened in mid-2026 because of two converging pressures. Isabel Díaz Ayuso's regional government has resisted the rental cap measures championed by the national government under the 2023 Ley de Vivienda, leaving Madrid as one of the few major Spanish cities where landlords and agencies operate with comparatively wide latitude. At the same time, the volume of active tourist apartment licences in the city centre has risen sharply, intensifying competition for stock and, residents say, intensifying the incentive to make listings look more attractive-or simply to steal images of real homes to do it.

Where the problem is hitting hardest

The neighbourhoods mentioned most often by people who have contacted community organisations about the issue are Lavapiés, Carabanchel and Tetuán-all three areas where a high proportion of residents are renters, many of them from migrant communities who may be less familiar with Spanish data-protection law or less confident about filing a formal complaint with the Agencia Española de Protección de Datos (AEPD), the national data protection authority.

The Federación Regional de Asociaciones de Vecinos de Madrid (FRAVM), which represents neighbourhood associations across the city, has been fielding queries about image misuse since at least the beginning of 2025. The organisation has pointed members toward the AEPD complaints portal, but the process requires documentation in Spanish and a degree of digital literacy that creates a practical barrier for some of the most affected households. A small business owner near the Mercado de Maravillas in Tetuán described discovering that a photograph taken outside his shop front had been used-without attribution-in a promotional graphic for a co-working space on the opposite side of the city.

Spain's data protection framework, built around the EU's General Data Protection Regulation (GDPR) which came into force in May 2018, is unambiguous: photographs of identifiable individuals or private spaces require explicit consent before commercial use. The AEPD has the power to levy fines of up to 20 million euros or four percent of annual global turnover for serious violations. In practice, enforcement against smaller operators or informal letting agents has been inconsistent, and complaints can take many months to resolve.

What residents can do now

Legal advisers at the Oficina Municipal de Información al Consumidor (OMIC), which operates advice points across Madrid including locations in Arganzuela and Hortaleza, say the first practical step for anyone who finds their image misused is to take timestamped screenshots documenting where the photo appears, then file a formal takedown request directly with the platform hosting it. Under GDPR, platforms operating in the EU are obliged to respond within 30 days.

If the platform does not act, a complaint to the AEPD can be filed online at aepd.es at no cost. Community legal clinics run by the Colegio de Abogados de Madrid offer free initial consultations on Tuesdays and Thursdays at the Bar Association's premises on Calle de Serrano, 11.

For the woman in Lavapiés, the listings using her apartment photos were eventually taken down after she contacted the platform directly-three weeks and several follow-up messages later. The agency that originally took the photographs has not responded to her written queries. She has now filed with the AEPD. Her case number is logged. The wait continues.