PRIVACY POLICY
This privacy policy complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), Organic Law 3/2018 of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), as well as, insofar as it is not contrary to the aforementioned regulations, Organic Law 15/1999 on the Protection of Personal Data (LOPD) and its implementing regulations, and/or any regulations that may replace or update them in the future.
Our organization is committed to the privacy of your personal data. The personal data provided is necessary to provide our services and is processed lawfully, fairly, and transparently, ensuring adequate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage through the application of technical and organizational measures.
Through this document, we wish to provide you with all the necessary information regarding the processing of your personal data by this organization in a transparent and fair manner.

I. DATA CONTROLLER
IDENTITY: GECKO VILLAS REAL ESTATE, S.L.
C.I.F. / N.I.F.: B54608443
ADDRESS: C/ DOCTOR CALATAYUD, 17 – PASSAGE BARRANQUET – LOCAL 3, 03724 MORAIRA (ALICANTE)
TELEPHONE: 966490409
E-MAIL: info@geckovillas.com
DATA PROTECTION OFFICER: dpo@procoden.es

II.- RECIPIENTS OF PERSONAL DATA
1.- The personal data provided will not be transferred unless provided for in the specific processing procedures.
2.- Optionally, for the contracting of cloud computing services and/or services for sending emails, communications, as well as other related IT services, personal data may be:
– Transferred to IT service companies located within the European Economic Area (EEA) or,
– Transferred to IT service companies located outside the EEA that are covered by the Privacy Shield, and therefore have adequate protection measures in place to guarantee the security of personal data. You can obtain more information by visiting this link:
https://www.privacyshield.gov/welcome
3.- Optionally, to administrations and other bodies when required to do so in compliance with legal obligations.

III.- LEGAL BASIS THAT LEGITIMIZES THE PROCESSING OF PERSONAL DATA
For each specific processing of personal data, we will inform you of the legal basis that legitimizes it.

IV. RIGHTS
RIGHT OF ACCESS
This is the right to obtain confirmation from the data controller as to whether or not personal data concerning the data subject are being processed and, if so, the right to access the personal data and the following information: the purposes of the processing, the categories of personal data involved, the recipients or categories of recipients to whom the personal data have been or will be disclosed, the retention period or the criteria used to determine this period, the existence of the right to request from the data controller rectification or erasure of personal data or restriction of the processing of personal data concerning the data subject, or to object to such processing, the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), the existence, where applicable, of automated decision-making, including profiling, when data is transferred to third countries, and the right to be informed of the appropriate safeguards applied. RIGHT TO RECTIFICATION
This is the right to request the rectification of your personal data if it is inaccurate, including the right to complete incomplete data. Please note that by providing us with your personal data by any means, you guarantee that it is true and accurate and undertake to notify us of any changes or modifications. Therefore, any damage caused by providing erroneous, inaccurate, or incomplete information on the website forms will be the sole responsibility of the data subject.
RIGHT TO ERASURE
This is the right to request the deletion of your personal data when, among other circumstances, it is no longer necessary for the purpose for which it was collected, or is being processed in another way, or you withdraw your consent. Please note that deletion will not be appropriate when processing your personal data is necessary, among other circumstances, to comply with legal obligations or for the formulation, exercise, or defense of legal claims. RIGHT TO LIMITATION
This is the right to request the restriction of the processing of your personal data, which means that in certain cases you can ask us to temporarily suspend the processing of your personal data or to retain it beyond the necessary period when you may need it.
RIGHT TO WITHDRAW CONSENT
This is the right to withdraw the consent you have provided by checking “I have read and accept the privacy policy” at any time and as specified in the corresponding “Exercise of rights” section or in the specific processing of commercial communications or newsletters. Please note that this right will not take effect if, among other cases, the processing of personal data is necessary for compliance with a legal obligation, the execution and maintenance of a contractual relationship, or for the formulation, exercise, or defense of legal claims. Furthermore, the withdrawal of consent will not have retroactive effect; that is, it will not affect the lawfulness of the processing based on consent prior to its withdrawal. RIGHT TO PORTABILITY
This is the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and to transmit it to another controller, provided that: the processing is based on your consent and is carried out by automated or computerized means.
RIGHT TO OBJECT
This is the right to object to the processing of your personal data based on our legitimate interest. We will not continue processing your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
RIGHT TO FILE A COMPLAINT WITH A SUPERVISORY AUTHORITY
If you believe we are processing your personal data incorrectly, you can contact us or you also have the right to file a complaint with the Spanish Data Protection Agency (AEPD):
https://www.agpd.es/portalwebAGPD/index-ides-idphp.php
EXERCISE OF RIGHTS
You can exercise your rights by sending a letter to the postal address indicated above or by email to info@geckovillas.com, attaching a copy of your NIF/NIE/Passport or similar document in both cases.

V.- PERSONAL DATA PROCESSING.
GENERIC PROVISIONS
The personal data requested in each of the specific processing processes are adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed, thus complying with the principle of data minimization.
The personal data requested in each of the specific processing processes are strictly necessary; failure to provide them would result in the inability to provide the requested service.
The communication of personal data provided for in each of the specific processing processes is, in some cases, necessary for the execution and maintenance of a contract, and in other cases, for compliance with a legal obligation applicable to the data controller.
CONTACT FORM
Personal data will be processed to process requests for information, suggestions, and complaints from users or customers.
The legal basis that legitimizes the processing of personal data is the express consent by checking “I have read and accept the privacy policy.”
Personal data will be retained for a period of two years from the moment it ceases to be processed, without prejudice to the exercise of your rights as a data subject.
Commercial Communications or Newsletter Form
Personal data will be processed to manage your subscription to our Newsletter, including the sending of personalized or non-personalized information about our products or services through various means, such as telephone, email, SMS, mobile applications, as well as any similar procedure. Please note that this type of data processing may involve the analysis of your user profile to determine your preferences and thus be able to send you information more tailored to your interests.
You can request to unsubscribe from this type of processing, depending on the medium used, as follows:
– Email: Through the link provided in each electronic communication or through a similar procedure specified in the commercial communication.
– WhatsApp (other apps): By requesting to unsubscribe.
– SMS: By requesting to unsubscribe.
The legal basis that legitimizes the processing of personal data is the express consent given: by checking “I have read and accept the privacy policy” on the website, through a physical document, or by email, as appropriate.
Please note that if the medium used is WhatsApp, personal data will be transferred to WhatsApp Ireland Limited, which is located within the EEA.
Personal data will be retained as long as you do not withdraw your consent as indicated in this section.