This Privacy Policy regulates the processing of personal data collected through the website https://galiciakeyholding.es (hereinafter, the “Website”), owned by Galicia Keyholding.

1. Data Controller

Controller: Galicia Keyholding

Phone: 696 69 83 57

Contact Email: admin@galiciakeyholding.es

2. Personal Data We Process

At Galicia Keyholding, we may process the following categories of personal data:

• Identification data: name and surname.
• Contact data: phone, email, postal address.
• Property data: property address, relevant details for providing the service, information about keys and access, incidents, or items to inspect.
• Billing data: NIF, banking details, or others necessary for the financial management of the service.
• Browsing and Website usage data: IP address, browser, device, and other data collected through cookies, as outlined in the Cookies Policy.

This data may be provided directly by you through the website’s contact forms, by email, phone, messaging apps (such as WhatsApp), or within the context of contracting our services.

3. Purpose of Data Processing

Your personal data will be processed for the following purposes:

• Handling information requests and contact: to attend to queries made via the website forms, email, phone, or messaging.
• Providing the services of Galicia Keyholding: managing the client relationship, organizing and performing property visits, keyholding, and attending to incidents in the property.
• Creating reports and documentation: issuing reports on the property’s condition, including photographic reports when applicable.
• Administrative, accounting, and tax management: issuing contracts, quotes, invoices, and complying with applicable legal obligations.
• Security and internal control: recording accesses, managing keys and incidents, and preventing misuse or fraud.
• Commercial communications (only if you have consented): sending information about services, news, or improvements related to Galicia Keyholding, by electronic or non-electronic means.

4. Legal Basis for Data Processing

The legal basis that allows us to process your personal data is:

• Performance of a contract or application of pre-contractual measures: for the hiring, provision, and management of Galicia Keyholding services.
• Consent: to address queries you send when no contractual relationship exists yet, and, if applicable, to send commercial communications when you have expressly accepted them.
• Compliance with legal obligations: to fulfill applicable tax, accounting, and data protection obligations.
• Legitimate interest: to improve our services, manage complaints, strengthen security, and prevent fraud, always considering and respecting your fundamental rights and freedoms.

5. Data Retention Period

Personal data will be retained for as long as necessary to fulfill the purpose for which it was collected and, afterward, for the legally required periods.

Specifically:

• While the contractual or service relationship between you and Galicia Keyholding is maintained.
• While we are processing your query or request for information.
• During the periods established by tax, accounting, and data protection regulations (for example, accounting and tax documents are usually kept for at least 5–6 years).

Once these periods have elapsed, the data may be kept blocked for as long as necessary to address potential legal liabilities and will then be deleted or anonymized.

6. Data Recipients

In general, your personal data will not be shared with third parties, unless required by law or when necessary to provide the service.

The following may have access to your data:

• Public administrations, courts, and tribunals, when required by law or necessary to address liabilities.
• Service providers acting as data processors, such as:
  • Hosting and website service providers.
  • Email platforms and internal management tools.
  • Accounting, tax, and other professionals who need access to the data to provide their services.

In all cases, these third parties will process the data following our instructions and under a contract that guarantees compliance with data protection regulations.

7. International Data Transfers

Galicia Keyholding seeks to use providers whose servers are located within the European Economic Area (EEA). In case services involving international data transfers are used, they will be carried out with appropriate guarantees, either through adequacy decisions by the European Commission, or by signing standard contractual clauses or other mechanisms recognized by the General Data Protection Regulation.

8. Rights of Data Subjects

As a user or client of Galicia Keyholding, you have the right to:

• Access: know if we process your personal data and, if so, obtain a copy of them.
• Rectification: request the correction of inaccurate or incomplete data.
• Erasure: request the deletion of your data when, among other reasons, they are no longer necessary for the purposes for which they were collected.
• Objection: object to the processing of your data in certain cases and, in particular, to the sending of commercial communications.
• Restriction of processing: request that the processing of your data be limited in certain circumstances.
• Portability: receive the personal data you have provided in a structured, commonly used, and machine-readable format, and transmit it to another controller when the processing is based on consent or a contract and is carried out by automated means.
• Withdraw consent: when processing is based on your consent, you can withdraw it at any time, without affecting the lawfulness of the processing prior to withdrawal.

You can exercise these rights by sending a written request, along with a copy of your ID or equivalent document, to:

Email: admin@galiciakeyholding.es

Phone: 696 698 337

Additionally, if you believe your data protection rights have been violated, you can file a complaint with the Spanish Agency for Data Protection (AEPD) through their official website https://www.aepd.es.

9. Data Security

Galicia Keyholding applies appropriate technical and organizational measures to protect your personal data and prevent its loss, alteration, misuse, unauthorized access, or theft. Among others, access control measures, protected passwords, internal key custody procedures, access logs, and backups are applied.

However, no system is completely secure, so we cannot guarantee absolute security of the information, but we commit to acting diligently and notifying, if applicable, any security incident that may affect your personal data in accordance with the applicable regulations.

10. Third-Party Data

If you provide us with third-party data (for example, contacts or authorized persons), you guarantee that you have their consent or another valid legal basis to communicate such data to us and that you have informed them of the contents of this Privacy Policy.

11. Minors

Galicia Keyholding’s services are not directed at individuals under 18 years old. We do not deliberately collect personal data from minors through the Website. If we become aware that data has been collected from a minor without proper authorization, we will proceed to immediately delete it.

12. Use of WhatsApp or Other Messaging Apps

If you communicate with Galicia Keyholding through WhatsApp or other messaging apps, your data will only be processed to manage the query or contractual relationship. Keep in mind that these platforms have their own privacy policies, independent of Galicia Keyholding, and we recommend reviewing them.

13. Links to Other Websites

The Website may contain links to third-party websites. Galicia Keyholding is not responsible for the privacy policies or the content of those external sites. We recommend reviewing the privacy policy of each page you visit.

14. Changes to the Privacy Policy

Galicia Keyholding may update this Privacy Policy to adapt it to legislative changes, control authority criteria, or modifications in our services. Any changes will be published on this page, so we recommend periodically reviewing its content.

Last updated: [28/11/2025]