Privacy Policy

Last updated: March 2026

1. Data Controller

Michael Andre J. DESCAMPS
CIF: Y3409271H
Address: Calle Centauro 2, Arona, 38631, Santa Cruz de Tenerife
Email: ✉ contacto arroba gestisure.com

2. Purposes of processing

We process your personal data for the following purposes:

  • Management of requested administrative procedures (NIE, municipal registration, property purchase, taxes, property management)
  • Communication with the user regarding the status of their procedures
  • Management of user accounts and sessions
  • Service improvement and aggregated usage analysis
  • Sending commercial communications (only with your express consent)
  • Billing and payment management

3. Legal basis for processing

  • Explicit consent of the user upon registration and acceptance of the terms of use
  • Performance of a contract for the provision of digital administrative services
  • Legitimate interest for service improvement and fraud prevention
  • Legal obligation for compliance with Spanish fiscal and administrative regulations

4. Data we collect

  • Identifying data: first name, surname, NIE/passport, nationality
  • Contact data: email, phone number, address
  • Documents: copies of documents required for procedures
  • Browsing data: IP address, device, pages visited (only with consent)

5. Recipients

We do not share your data with third parties except:

  • Spanish public authorities when necessary to complete your procedures
  • Legal obligation before courts, tribunals or competent authorities
  • Essential service providers (hosting, payment processing) under data processing agreements

6. International transfers

We do not transfer data outside the European Economic Area. All our servers are located in the European Union and data is encrypted with AES-256.

7. Retention period

  • Procedure documents: automatically deleted once the procedure is complete
  • Account data: retained while the account is active
  • Tax data: 5 years (legal obligation under Spanish regulations)
  • Billing data: 5 years (General Tax Law)

8. Your rights

You have the right to:

  • Access your personal data
  • Rectification of inaccurate or incomplete data
  • Erasure of your data ("right to be forgotten")
  • Portability of your data in a structured format
  • Object to processing
  • Restriction of processing
  • Withdraw consent at any time

To exercise these rights, send an email to ✉ contacto arroba gestisure.com stating your full name and the right you wish to exercise.

9. Security

We apply technical and organisational measures to protect your data:

  • AES-256 encryption for stored documents
  • HTTPS/TLS connections for all communications
  • JWT tokens with time-limited expiry for sessions
  • GDPR-compliant European servers
  • Restricted access through role-based access control

10. Complaints

If you believe that the processing of your data is not appropriate, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).