Last update: 13/04/2026
1. Data controller
In accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018, and Law 34/2002 (LSSI), we inform you about how we process your personal data.
- Controller: ISLA GESTION 360 SL (Tax ID/NIF: B23918204)
- Contact email: administracion@islagestion360.com
- Registered address: Calle Bolivia, 7, Floor 1, Door B, 38685 Guía de Isora (Santa Cruz de Tenerife), Spain
2. Data we process
- Identification and contact data: name, email, phone number, and location.
- Request data: service interest, property type, urgency, budget, and message.
- Minimum technical data: IP and security metadata for fraud and abuse prevention.
- Documentary and contractual data when you move to client stage and request service management.
3. Processing purposes
- Handle requests submitted through web forms and contact channels.
- Manage commercial follow-up for leads, prospects, and clients in our CRM.
- Provide contracted services, manage documents, and send operational communications.
- Comply with legal, tax, security, and internal traceability obligations.
4. Legal basis
- User consent (Art. 6.1.a GDPR) for forms and initial communications.
- Pre-contractual measures or contract performance (Art. 6.1.b GDPR).
- Legal obligations and legitimate interest for security and legal defense (Art. 6.1.c and 6.1.f GDPR).
5. Data retention
We retain data only for as long as necessary for each purpose and, afterward, for the legal limitation periods that apply.
- Requests not converted into clients: up to 24 months from last meaningful contact.
- Client data: while the relationship exists and during applicable commercial/tax legal periods.
- Security data (logs): for the period required to prevent incidents and comply with regulations.
6. Recipients and processors
We do not sell personal data. Data may be shared with providers essential to operations (web hosting, transactional/professional email, and technology support), under data processing agreements and appropriate safeguards.
7. Your rights
You may exercise your data protection rights at any time by contacting administracion@islagestion360.com and properly identifying yourself.
- Right of access to your personal data.
- Right to rectify inaccurate data.
- Right to erasure where applicable.
- Right to object and to restriction of processing.
- Right to data portability where applicable.
- Right to withdraw consent and to lodge a complaint with the Spanish DPA (www.aepd.es).
8. International transfers
If any technology provider is located outside the European Economic Area, we apply appropriate GDPR safeguards (for example, Standard Contractual Clauses).
9. Minors
Our services are not intended for children under 14. If unauthorized minors' data processing is detected, we will apply blocking or deletion measures as required.
10. Policy updates
We may update this Privacy Policy for legal, technical, or operational reasons. The current version will always be available on this page.