Privacy policy
Last updated: 8 November 2026
The Spanish version (Política de privacidad) prevails.
1. Data controller
G K Mechin (GKM Digital, brand LocalVisio), NIE/NIF Y2129101M, C. Melilla, 25, 29680 Estepona, Málaga, España. Email: contact@gkm-digital.com, contact form or post to the address above. No data protection officer has been appointed (not mandatory for this activity).
2. Data we process
- Contact / subscription form: name, company, town, phone, email, request type, message, date of the request and proof of your consent.
- Customers: data needed to perform the contract and invoice (contact and billing details, access you give us to your tools).
- Technical data: IP address and connection data, processed by our hosting provider for security and, temporarily, by our anti-abuse system (rate limiting). We do not store your IP address with your request.
3. Purposes and legal bases (art. 6 GDPR)
- Answering your request and preparing a possible subscription: pre-contractual steps at your request (art. 6.1.b) and your consent (art. 6.1.a).
- Performing the contract and managing the customer relationship: performance of a contract (art. 6.1.b).
- Invoicing, accounting and tax obligations: legal obligation (art. 6.1.c).
- Website security and abuse prevention: legitimate interest (art. 6.1.f).
We do not send marketing communications without your prior consent and we make no automated decisions with legal effects on you. Part of the handling of requests is assisted by artificial intelligence tools, under human supervision.
4. Recipients and processors
Your data is never sold or transferred to third parties for their own use. It is only shared with the providers needed for the service, acting on our behalf:
- Cloudflare, Inc. (website hosting and form processing) – USA / EU; transfers covered by the EU–US Data Privacy Framework and standard contractual clauses.
- Brevo (Sendinblue SAS), France – sending the internal notification email and the confirmation email sent to you.
- CallMeBot (notification relay service) and WhatsApp Ireland Ltd / Meta Platforms – sending a WhatsApp notification summarising your request to the controller's business phone; possible transfers to the USA covered by the Data Privacy Framework.
- Where enabled, FormSubmit (backup email relay) and Telegram (backup notification).
- An artificial intelligence assistance tool used to handle requests quickly (a provider that may process data outside the EU with appropriate safeguards).
- Public authorities and advisers (accountant, tax authority) where required by law.
5. Retention periods
- Requests that do not lead to a contract: 12 months after the last exchange.
- Customers: for the duration of the contract, then for the legal periods (6 years for accounting records under art. 30 of the Spanish Commercial Code; 4 years for tax obligations).
- Notifications received by email or WhatsApp: deleted according to the same periods.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time, by email to contact@gkm-digital.com, via the contact form (type "Question / other") or by post to the address above, with proof of identity. You can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the authority of your country.
7. Security
The website is served over HTTPS only. The channels that receive notifications (email, WhatsApp) do not appear in the form code or the website scripts: they are configured server-side.
8. Cookies
See the cookie policy.