English
Español
Nederlands
Deutsch
This policy explains how Vivint Mallorca SL processes personal data when you visit gestprivilege.com, enquire about its properties or contact us using forms, email, telephone or WhatsApp. It covers data collected through these channels. If a property transaction requires additional information, the relevant notice will be provided when that information is requested.
Data controller
- Data controller
- Vivint Mallorca SL
- Trading name
- Gestprivilege
- Spanish tax identification number (NIF)
- B75448027
- Address
- C/ Joan Lliteres 41, 07500 Manacor, Islas Baleares, España
- Privacy contact
- info.es@gestprivilege.com
Key information
- Purpose
- Answer property enquiries and requests, arrange contact or viewings, and manage the steps you ask us to take.
- Legal grounds
- Pre-contractual steps or a contract; legitimate interests for general communications and security; legal obligations and, where appropriate, specific consent.
- Recipients
- Authorised staff, the professional or agency identified in the enquiry, necessary service providers, and authorities where legally required.
- Rights
- Access, rectification, erasure, objection, restriction and portability where applicable, by contacting info.es@gestprivilege.com.
The data we process and its sources
We process information you provide directly: your name, email address, telephone number and country code, language, enquiry type, message, property or reference of interest, and preferences you choose to share. Fields and options vary between forms. We also retain the communications needed to deal with your request.
Browsing generates technical information such as IP address, browser, device, pages viewed, date and time, online identifiers and interaction events. Security measures may use this information or pseudonymised representations of it to detect abuse and limit automated submissions. Third-party technologies are explained below.
Providing information to make an enquiry is voluntary. Required fields help identify and answer your request; without them we may be unable to process it. Do not put health information, identity documents, bank details or other sensitive information in free-text fields. If you act for another person, you must be authorised to provide their data and give them this information.
Purposes and legal grounds
Enquiries about buying, selling, renting, valuations, brochures and viewings: we use your data to respond, connect you with the appropriate team and manage the steps you request. The legal ground is taking pre-contractual steps at your request or performing an existing contract (GDPR Article 6(1)(b)). We may reply by email, telephone or the contact channel you requested.
Other general communications: processing is limited to answering a message addressed to the company, based on our legitimate interest in responding to people who contact us (Article 6(1)(f)). We consider your reasonable expectations, use only necessary information and allow you to object on grounds relating to your situation.
Security and operation: preventing fraud, abuse, unauthorised access and incidents, and keeping the website operational, are legitimate interests (Article 6(1)(f)). Measures must be proportionate and limit access to and retention of information.
Legal obligations and rights: we retain or disclose information when required by law and handle data-protection requests to comply with legal obligations (Article 6(1)(c)). If a transaction or service is agreed, we will explain any additional processing it requires.
Promotional communications and non-essential technologies: where processing requires consent, it must be requested specifically and separately (Article 6(1)(a)). Making an enquiry or reading this policy does not itself authorise unrelated advertising or advertising cookies. Any statutory exception for commercial communications must meet the Spanish information-society legislation (LSSI), including an easy, free way to object.
Who may receive the data
Enquiries may be recorded in the website’s management systems and emailed to authorised sales staff. If you contact an agency or professional identified on a property listing, that recipient may receive the information needed to answer. Where they act as an independent controller, their own privacy information applies to their processing; you may ask us for their contact details and clarification of their role.
Hosting, email, enquiry-management, maintenance, support and security providers may access the information necessary to deliver their services. The email and support workflow may include technical copies of enquiries. Access on behalf of Vivint Mallorca SL must be limited to its instructions and to confidentiality and data-protection obligations, with the safeguards required by GDPR Article 28.
Information may be disclosed to public bodies, courts or other authorities where legally required, and to advisers or professionals who need to be involved in the steps you requested. The sale of your data or its disclosure for third-party advertising unrelated to those steps is not authorised. Google, Meta and external-content services are addressed below.
How long data is retained
Enquiries and follow-up are retained for as long as needed to answer the request, organise the steps you asked for or maintain the relationship you initiated. Necessity is assessed against the status of the enquiry, communications and applicable obligations. An enquiry alone does not justify indefinite retention.
Once the purpose ends, data will be erased or, where appropriate, blocked with restricted access for the applicable statutory retention or liability periods. Information subject to contractual, accounting or tax obligations follows the periods applicable to the particular records. Backups follow their replacement cycle and must not be used to revive expired purposes.
Technical logs are kept for a period proportionate to security and incident handling. Processing based on consent will cease for that purpose when consent is withdrawn, without prejudice to retaining necessary evidence or meeting legal duties. Retention of third-party identifiers and data also depends on service settings and the providers’ policies.
External services and international transfers
The website integrates Google Tag Manager, Google Analytics and the Meta pixel to manage tags, measure navigation and interactions, and assess advertising results. These services may process online identifiers, browser information and usage data and associate them with information held by the provider according to its settings and policy. Any required analytics or advertising consent is separate from your property enquiry.
Opening a WhatsApp link takes you to WhatsApp, where you decide whether to send a message. Browsing alone does not send a WhatsApp enquiry. Some pages may embed virtual tours or other content from providers such as Matterport or Inmovilla. Loading external content may disclose technical connection information to its provider, whose own privacy terms apply.
International providers may involve access to or processing of data outside the European Economic Area, including the United States. Transfers that require safeguards must comply with GDPR Chapter V: an applicable, current adequacy decision covering the recipient and processing —such as the EU–US Data Privacy Framework for participating organisations— or standard contractual clauses with any necessary supplementary measures. A provider’s familiar name does not by itself establish those safeguards. You may ask the privacy contact for recipient and location information and a copy of, or reference to, the applicable safeguards.
Cookies and privacy choices
Strictly necessary cookies and similar technologies may be used to provide a service you request, remember essential choices and protect the website. Non-exempt analytics and advertising technologies require information and prior consent. Consent must allow distinct choices and be easy to withdraw.
This policy does not replace specific cookie information or a cookie-choice mechanism. Reading it, continuing to browse or submitting a form does not constitute acceptance of non-essential technologies. You may consult providers’ privacy controls and delete or block identifiers in your browser. For help with your choices or withdrawing consent, contact info.es@gestprivilege.com. Blocking some functions may prevent external content from loading without preventing contact by email or telephone.
Your rights and how to exercise them
You may request access to your data, correction of inaccurate information, erasure or restriction, and object on grounds relating to your situation where processing relies on legitimate interests. Portability applies in the circumstances specified in the GDPR, particularly to data you provided that is processed automatically on the basis of consent or a contract. These rights are not absolute: legal duties or legal claims may justify retaining certain information subject to appropriate restrictions.
You may withdraw consent at any time without affecting the lawfulness of earlier processing. You may also object at any time to direct marketing and related profiling.
Write to info.es@gestprivilege.com or to Vivint Mallorca SL at the address above, stating the right you wish to exercise and the details needed to locate your request. Additional identification will only be requested where there are reasonable doubts, and only to the extent necessary. Requests are generally free and answered within one month of receipt. Complexity or the number of requests may justify an extension of up to two additional months; we will explain the reason within the first month.
If you believe your rights have been infringed, you may complain to the Spanish Data Protection Agency (AEPD), www.aepd.es, or to the competent supervisory authority in the place of your habitual residence, work or the alleged infringement.
Automated decisions, children and security
The forms do not themselves make solely automated decisions with legal or similarly significant effects on access to housing or a service. Analytics and advertising tools may produce statistics or audience segments, subject to their legal grounds and your choices.
The website’s property services are intended for adults. Do not request a transaction in your own name if you lack legal capacity to do so, or intentionally provide children’s data in the forms. Appropriate action will be taken if children’s data is found to have been supplied without authority.
We apply technical and organisational measures intended to protect confidentiality, integrity and availability, limit access and prevent abuse. No system can guarantee absolute security. Please report any incident concerning your data to the privacy contact.
Updates and applicable law
This information may be updated to reflect changes in processing, services or legislation. The date shown identifies the version. An update alone does not authorise a new purpose: where required, advance information and an appropriate legal basis will be obtained.
The main framework is Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 on data protection and digital rights, and Spanish Law 34/2002 on information-society services and electronic commerce. Spanish, English, German and Dutch versions provide the same information.