Privacy Policy
At Goto-Property Management, we prioritize your privacy and the protection of personal data in accordance with the General Data Protection Regulation (GDPR) and Spanish Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).
1. Data Controller
Goto-Property Management (hereon Goto) is the trading name of Agile Property Management SL with NIF B55382691 and is responsible for the processing of your personal data.
2. Data Collection & Purpose of Data Processing.
We will collect your personal data from you whenever you engage with us. Based on the service we provide to you (or on your behalf), we may also gather additional personal information, as outlined in the table below:
|
Personal Information that we collect |
Why this data is collected |
|
Your name, postal address, telephone number, email address and details of your requirements. |
To provide the service of listing, onboarding, and renting out of the properties listed. To be able to readily communicate with you regarding services offered. To manage and facilitate accommodation bookings and offer alternative properties related to your search criteria. To enable you to create and manage ID logins and passwords associated with authentication criteria. To constantly strive to improve our service to you through customer surveys, newsletters, updates, and promotions. |
|
Proof of Identity from travel documents. |
Data processor. To comply with Royal Decree 933/2021 (SES.Hospedajes), we use Estadia Solutions Ltd (registered in England and Wales, company number 17202719, registered office 128 City Road, London, EC1V 2NX, United Kingdom; data protection contact: Sub-processors. To deliver the service, Estadia uses the following sub-processors: Supabase Inc. (database, authentication and storage; European Union, Ireland, eu-west-1); Cloudflare Inc. (hosting and content-delivery network; European nodes); and Functional Software Inc. operating as Sentry (error monitoring; Germany). The current list is published at https://estadia.host/en/subprocessors. International transfers. All sub-processors process the data within the European Economic Area (EEA) or with equivalent safeguards. Where a sub-processor's parent group is established outside the EEA (USA), incidental access is governed by the Standard Contractual Clauses included in each processing contract. Retention. Guest data is retained for 3 years from check-in under Royal Decree 933/2021 and deleted automatically after that period. |
|
Your bank account details or payment card information. |
To allow for the processing of payments and transactions: authorisations, clearing, chargebacks, billing, collection, and accounting. To verify bank account details used for transactions. |
|
Evidence that you have the right to rent a property |
Where you the landlord contract Goto’s services to carry out short term rentals of your property in Spain, and where the right to rent is to be verified. |
|
Details of your insurances, licencing documentation and service contracts relating to the property you wish to rent. |
Where you are a landlord and Goto are providing the rental services. |
|
Details of your property: Photographs, floorplans, property surveys, energy performance certificate ratings, property descriptions. |
To deliver our service to you the landlord when ensuring that your property complies with legislation and regulations. |
|
An inspector’s report regarding the property. Photographs of your property. An inventory to record the condition of your property, at the start and end of a rental period. |
Goto is to deliver the service contracted to you the landlord. |
|
Your arrival date and departure as landlords and guests |
To deliver our service to you on the required dates. |
|
URL Information, IP Address, Operating System, Brower type |
To continuously improve the services provided to our customers. |
|
Communication & marketing preferences |
To only send you information relating to services & products that you are interested in. |
3. How personal data is collected.
Direct – Personal data you provide when filling out forms or communicating with us via email, telephone, website, live chat, social media, mail, or other means, or through other portals when enquiring about our services, products, or promotions.
4. How we use your personal data.
Data is collected so Goto can provide the services contracted, answer any questions arising and be able to comply with regulations.
Through a contract – Where the collection and processing of your personal data is necessary to be able to carry out the requirements within the contract.
Legal requirements – Where the collection and processing of your personal data is necessary for compliance with a legal obligation.
Consent – Where we seek your clear and unambiguous consent before processing your personal data. For example, when sending or receiving marketing information.
Legitimate interest – Where personal information is processed to: List and book a property and to deliver our core services to landlords and guests.
6. Data Sharing
Personal data within Goto Property Management for the provision of services contracted.
Sharing with 3rd parties:
- Goto will share personal data with: Governmental organisations, law enforcement and border control authorities, courts, tribunals, arbitrators, as required from time to time to comply with known regulatory & legal obligations.
- Where Goto is required to engage with 3rd party service contractors to provide services (repairs, surveys, systems providers, screening agencies, certifying companies, and delivery of goods & services contracted) Goto only provide information that is required for contractors to carry out the contracted or requested service.
- Payment processors – To allow Goto to process payments for services provided.
- Booking platforms – To allow Goto to effectively manage the booking journey for clients.
- Insurance providers – Upon instructions by the landlord to provide service.
- Solicitors & Lawyers – To pursue claims.
- Law enforcement bodies – To comply with legal obligations or court orders (Authorities, HMRC, Police)
- Land Registry Office – For certificates and licences that are associated with the ownership and rental of the property.
7. Your Rights regarding your personal information
Right of access – You have the right to ask for copies of your personal data that is held by Goto.
Right to rectification – You have the right to request that inaccurate data be corrected, and incomplete data be completed.
Right to erase – You have the right to request for your personal data to be deleted by Goto.
Right to the restriction of processing – You have the right to ask us to restrict the processing of your personal data.
Right to object to processing – You have the right to object to the processing of your personal data.
Your right to data portability – You have the right to request and understand whether we have transferred your personal data and to where.
If you wish to request the exercise of any of the individual rights outlined in this section please email
8. Data Security
We implement appropriate technical and organizational measures to ensure the security of your data.
At Goto we take the security of your personal data very seriously, and therefore take measures to ensure it remains safe, isn’t destroyed, misused, or damaged and will prevent from any unauthorised access. Measures taken include:
- Software – All systems have protections in place to prevent against unauthorised access.
- Hard copy files – Are stored safely with restricted access.
9. How long we keep your personal information for:
Personal data will be kept for as long as is reasonably necessary for the purpose of being able to deliver our service to you. The time in which personal information is kept will vary. We will hold data to comply with statutory, financial and enforcement obligations. Information held is always retained in line with its purpose.
10. Cookies
Our website uses cookies to improve user experience and analyse website traffic. By continuing to use our website, you consent to the use of cookies. You can manage cookie preferences in your browser settings.
11. Changes to the Privacy Policy
We may update this privacy policy in accordance with legal requirements. Please check this page regularly for updates.
If you have any questions, comments, or requests related to this Privacy Notice or how we manage your personal data, please feel free to contact us by emailing
Privacy policy last updated.
14th September 2026