General Social Media Privacy Policy

This Privacy Policy applies exclusively to the ordinary and organic management of our official social media pages. Any advertising activities involving commercial prospecting, advanced audience segmentation, sponsored advertising campaigns or the collection of personal data through advertisements shall be governed exclusively by their corresponding specific Privacy Notice.

1. Basic Information on the Processing of Personal Data

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR) and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE), KEY ENTERPRISES DEVELOPMENTS S.L. hereby informs users that it has created official corporate profiles on the following social media platforms:

• Facebook: Villas de Loix
• Instagram: @VillasdeLoix
• YouTube: Villas de Loix

The primary purpose of these official social media pages is to promote and market the properties commercialised by KEY ENTERPRISES DEVELOPMENTS S.L.

Below you will find the basic information regarding the processing of your personal data carried out through these social media profiles.

2. Additional and Detailed Information on the Processing of Personal Data

2.1. Data Controller Details

Details of KEY ENTERPRISES DEVELOPMENTS S.L. as Data Controller of the personal data processed through its official social media profiles:

Company Name: KEY ENTERPRISES DEVELOPMENTS S.L.
Registered Address: C/ Munich, 16, 03503 Benidorm (Alicante), Spain
Telephone: +34 686 572 670
Email: villasdeloix@villasdeloix.com
Website: www.villasdeloix.com
Data Protection Officer (DPO): Grupo Arrecife Consultores 2007 S.L.
DPO Contact Details: +34 963 127 867 / consultoria@grupoarrecife.com

Joint Controllership

Users are hereby informed that KEY ENTERPRISES DEVELOPMENTS S.L. and the operator of the relevant social media platform (for example, Meta Platforms Ireland Limited for Facebook and Instagram, or Google Ireland Limited for YouTube) act as joint controllers in relation to the management of our corporate social media pages, the collection of visitor data and the provision of page analytics and interaction statistics (Insights).

Under this joint controllership arrangement:

• The social media platform assumes primary responsibility for the technical operation of the platform, platform security and the handling of users’ data protection rights in relation to the platform as a whole.
• KEY ENTERPRISES DEVELOPMENTS S.L. is responsible for managing the content published on its official pages, moderating comments and responding to users’ data protection requests insofar as these relate to processing activities under its direct control.

2.2. Legal Basis, Purposes of Processing and Data Retention

Users maintain their own profiles on the relevant social media platforms and voluntarily choose to follow or interact with the official pages operated by KEY ENTERPRISES DEVELOPMENTS S.L., thereby expressing an interest in the information published through those platforms.

By choosing to follow or interact with our social media pages, the processing of the personal data that users have made publicly available is based on our legitimate interest in maintaining commercial relationships and communicating with our audience.

KEY ENTERPRISES DEVELOPMENTS S.L. only accesses and processes information that users have made publicly available through their social media profiles, in particular their public profile name. Such information is used exclusively within the relevant social media platforms for ordinary interactions with users and is not processed for any other purpose.

In particular, KEY ENTERPRISES DEVELOPMENTS S.L. may carry out the following activities:

• Access publicly available profile information.
• Publish content that may appear in the user’s news feed or timeline, subject to the relevant social media platform’s algorithms and terms of service.
• Send individual private messages through the social media platform solely in response to enquiries, requests or interactions initiated by the user.

Users may manage their connections; remove content they no longer wish to see and control with whom they share information at any time through the privacy settings provided by the relevant social media platform.

The operators of the respective social media platforms process users’ personal data for the purposes, legal bases and retention periods described in their own Privacy Policies.

Retention Period by KEY ENTERPRISES DEVELOPMENTS S.L.

Personal data will only be processed while the user maintains their connection with our corporate social media pages (for example, by following our account, remaining a member or continuing to interact with our content).

Once the user ceases to follow or interact with our pages or exercises their right to object, KEY ENTERPRISES DEVELOPMENTS S.L. will cease processing their personal data.

2.3. With Whom Are Users’ Personal Data Shared?

KEY ENTERPRISES DEVELOPMENTS S.L. does not disclose personal data to third parties except where required by law.

The operators of the respective social media platforms may disclose or otherwise process users’ personal data in accordance with their own Privacy Policies where they process such information for their own purposes.

In addition, KEY ENTERPRISES DEVELOPMENTS S.L. works with service providers that do not receive personal data as recipients but may process such data on our behalf while providing their services. These companies act as data processors, and we have entered into the corresponding data processing agreements required under applicable data protection legislation to ensure the security and confidentiality of personal data. These service providers include:

• IT and marketing service providers, which supply information technology, hosting and marketing services.

International transfers of personal data are carried out by the operators of the social media platforms, not by KEY ENTERPRISES DEVELOPMENTS S.L.

For example, Meta Platforms Ireland Limited is the entity responsible for the operation of Facebook and Instagram within Europe, although these platforms are owned by Meta Platforms, Inc., whose principal data processing facilities are located in the United States.

Some of these international data transfers are carried out by Meta Platforms Ireland Limited on the basis of the European Commission’s adequacy decisions, adopted pursuant to Article 45(1) GDPR. Under these decisions, the European Commission has recognised that certain countries outside the European Economic Area (EEA) provide an adequate level of protection for personal data transferred from the European Union. These countries include, among others:

• Argentina
• Israel
• New Zealand
• Switzerland
• United Kingdom
• Canada

The current list of adequacy decisions adopted by the European Commission is available at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en

Furthermore, where international data transfers are not covered by the adequacy decisions referred to above, Google Ireland Limited has entered into the European Commission’s Standard Contractual Clauses, adopted under Commission Implementing Decision (EU) 2021/914 of 4 June 2021, with other Google companies and with its processors and/or sub-processors. These contractual clauses provide appropriate safeguards for transfers of personal data outside the European Economic Area (EEA) in accordance with Article 46(2)(c) GDPR.

You may obtain a copy of these Standard Contractual Clauses by contacting us at VILLASDELOIX@VILLASDELOIX.COM.

In addition, Google LLC is certified under the EU–U.S. Data Privacy Framework, adopted by the European Commission on 10 July 2023. Pursuant to Article 45(1) GDPR, this adequacy decision recognises that participating organisations provide an adequate level of protection for personal data transferred from the European Union.

Further information regarding the EU–U.S. Data Privacy Framework is available at: https://www.dataprivacyframework.gov/s/

2.4. Users’ Rights

With regard to your rights of access, rectification, erasure, objection, restriction of processing, the right to be forgotten and data portability, which may be exercised against KEY ENTERPRISES DEVELOPMENTS S.L. in accordance with the General Data Protection Regulation (GDPR), the following considerations should be taken into account:

• Right of access: The scope of this right depends on the functionality of the relevant social media platform and the extent to which users can access information relating to their own profiles.
• Right to rectification: This right may only be exercised in relation to information that is under the direct control of KEY ENTERPRISES DEVELOPMENTS S.L., such as the removal or amendment of comments published on our official pages. In most cases, requests relating to profile information must be addressed directly to the relevant social media platform.
• Rights to erasure, objection and restriction of processing: As with the right to rectification, these rights may only be exercised in relation to information under the direct control of KEY ENTERPRISES DEVELOPMENTS S.L., for example by unfollowing our social media pages or requesting the removal of content published on them.
• Right to be forgotten: This right may likewise only be exercised in respect of information under the direct control of KEY ENTERPRISES DEVELOPMENTS S.L., such as comments published on our pages or your connection with our social media profiles. Since personal data are stored on the servers of the respective social media platforms, any request for the permanent deletion of your account, activity history or digital footprint must be submitted directly to the relevant platform (Facebook, Instagram or YouTube) through its privacy settings or support channels.

Where KEY ENTERPRISES DEVELOPMENTS S.L. and the relevant social media platform act as joint controllers, you may exercise your data protection rights against either joint controller.

You may also request the essential terms of the applicable joint controllership arrangement by contacting us at: villasdeloix@villasdeloix.com

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD), particularly if you consider that the exercise of your rights has not been handled satisfactorily.

Spanish Data Protection Agency (AEPD)

Address: C/ Jorge Juan, 6, 28001 Madrid, Spain
Telephone: +34 901 100 099 / +34 912 663 517
Website: https://www.aepd.es

3. User Content

Once a user has chosen to follow or interact with the official pages of KEY ENTERPRISES DEVELOPMENTS S.L., they may publish comments, links, images, photographs or any other multimedia content supported by the relevant social media platform. In all cases, the user must be the lawful owner of such content, hold the corresponding copyright and intellectual property rights, or have obtained the necessary authorisation from the relevant third parties. The publication of any content, including text, graphics, photographs, videos or any other material, that is unlawful, offensive, defamatory, discriminatory, contrary to public morals or public order, or that infringes intellectual or industrial property rights, image rights or any applicable law, is expressly prohibited. In such circumstances, KEY ENTERPRISES DEVELOPMENTS S.L. reserves the right to remove the content immediately and, where appropriate, request the permanent blocking of the user concerned. KEY ENTERPRISES DEVELOPMENTS S.L. accepts no responsibility for any content voluntarily published by users on its social media pages. Users should be aware that any content they publish may be visible to other users of the relevant social media platform and that they remain solely responsible for protecting their own privacy when sharing such information. Any images or other content published on our social media pages are not stored by KEY ENTERPRISES DEVELOPMENTS S.L.; however, they may continue to be stored and processed by the relevant social media platform in accordance with its own Privacy Policy and Terms of Service.

4. Competitions and Promotions

KEY ENTERPRISES DEVELOPMENTS S.L. reserves the right to organise competitions, prize draws and promotional campaigns through its official social media pages, in which users who follow or interact with our profiles may participate. Where such promotions are conducted through a social media platform, the applicable Terms and Conditions for each promotion will be published on the relevant platform. All competitions and promotions will be conducted in compliance with Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE) and all other applicable legislation. The relevant social media platform does not sponsor, endorse, administer or assume any responsibility for any competition or promotion organised by KEY ENTERPRISES DEVELOPMENTS S.L., nor is it associated with such activities in any way.

5. Advertising

KEY ENTERPRISES DEVELOPMENTS S.L. uses its official social media profiles to promote its products, services and properties.

Where we intend to use your contact details for direct marketing or commercial prospecting, such processing will always be carried out in accordance with the requirements of the General Data Protection Regulation (GDPR) and the Spanish Information Society Services and Electronic Commerce Act (LSSI-CE).

The mere recommendation of the official social media pages of KEY ENTERPRISES DEVELOPMENTS S.L. to other users, so that they may receive information about our activities or benefit from our promotions, shall not be regarded as advertising.

For further information on how the operators of the relevant social media platforms process your personal data, please refer to their respective Privacy Policies:

Facebook & Instagram (Meta): https://www.facebook.com/privacy/policy/

YouTube (Google): https://policies.google.com/privacy

Alicante, 22 June 2026