1. Data controller
The data controller responsible for the processing of personal data on this Website is:
- Trading name: Gold Key Management
- Tax identification: NIE Z4004949-X
- Address: Av. Jerez de la Frontera 35, 03170 Ciudad Quesada, Alicante, Spain
- Email: info@goldkeymanagement.es
2. What data do we collect
We process the following categories of personal data:
- Contact data: name, email address, telephone or WhatsApp number, that you provide voluntarily through our contact form or by writing to us directly.
- Property data: property location, type of service requested and any details you choose to share with us about your property.
- Communication data: the content of messages you send us, including via email and WhatsApp.
We do not collect special categories of personal data (health, religion, political opinions, etc.).
3. Purpose and legal basis
We process your personal data for the following purposes:
- To respond to your enquiry and provide the information you request. Legal basis: pre-contractual measures at your request (Art. 6.1.b GDPR).
- To provide the contracted services if you become a client. Legal basis: performance of a contract (Art. 6.1.b GDPR).
- To comply with legal obligations, such as tax and accounting requirements. Legal basis: legal obligation (Art. 6.1.c GDPR).
We do not use your data for automated decision-making or profiling, and we do not send marketing communications without your prior consent.
4. Retention periods
We retain your personal data only for as long as necessary for the purposes for which it was collected:
- Enquiry data: up to 2 years from the last contact, unless you become a client.
- Client data: for the duration of the service agreement and for the legally required retention periods after termination (typically 6 years for tax purposes).
5. Recipients of the data
Your personal data is treated confidentially and is not shared with third parties except where strictly necessary to provide the service or to comply with a legal obligation. The following categories of recipients may access your data:
- Email and hosting service providers, under data processing agreements.
- Tax advisers and accountants, where required for legal compliance.
- Public authorities, where required by law.
We do not transfer personal data to countries outside the European Economic Area.
6. Your rights
You have the following rights under the GDPR:
- Right of access: to obtain confirmation of whether we are processing your data and to receive a copy.
- Right of rectification: to correct inaccurate or incomplete data.
- Right of erasure: to request deletion of your data when it is no longer needed.
- Right to restriction of processing: in the cases provided by law.
- Right to data portability: to receive your data in a structured, commonly used format.
- Right to object: to the processing of your data based on legitimate interests.
- Right to withdraw consent at any time, where processing is based on consent.
To exercise these rights, please email info@goldkeymanagement.es, identifying yourself and specifying the right you wish to exercise. We will respond within one month.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) if you consider that we have not addressed your request adequately.
7. Security measures
We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including secure email systems, restricted access to data on a need-to-know basis, and regular review of our security practices.
8. Changes to this policy
We may update this Privacy Policy from time to time. The most recent version will always be available on this page, with the date of last update at the top.
9. Contact
For any question related to this Privacy Policy or to exercise your rights, contact us at info@goldkeymanagement.es.