Privacy notice
Last updated: 1 November 2026
This notice explains how we handle the personal data you give us when you visit our website, fill in our property questionnaire or contact us about our services.
1. Who is responsible for your data
The data controller is Irene Mendoza González, who runs ALON (alonkeys.com). ALON is a business that is still being set up. When the company is incorporated, it will become the controller: we will update this notice and let you know.
For any question about your data, write to info@alonkeys.com.
2. What data we collect
- Contact details: your name, email address, country, preferred language and contact channels, and your phone number if you choose WhatsApp, Viber or phone calls.
- About your property: the town or area (never the street address), type, size, number of rooms, age, outdoor features, systems, how it is used, how often you would like it checked, and who already works there (roles only, no names).
- Anything you add in the comments box.
- When you visit this website: technical data such as your IP address, browser and the pages you request, which our hosting provider records in its server logs. We do not use cookies or analytics.
Please do not send us addresses, alarm or key box codes, passwords or the dates your home will be empty through this form.
3. Why we use it and on what legal basis
We use your data to prepare the proposal you asked for, send it to you and answer your questions about it.
The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). We need the required answers to prepare an accurate proposal. Without them we cannot give you a quote.
We do not use your data for marketing, we do not sell it, and we do not make automated decisions or profiles about you.
4. Who else processes your data
We use these service providers, who process data only on our instructions and under a data processing agreement:
| Provider | What for | Where the data is stored |
|---|---|---|
| Tally (Tally BV, Belgium) | Hosting the questionnaire | European Union |
| Tuta (Tutao GmbH, Germany) | Our email | Germany |
| Netlify (Netlify, Inc., USA) | Hosting this website (technical logs such as IP addresses) | United States |
If you choose to talk to us by WhatsApp, Viber or Messenger, those messages pass through the apps you chose, under their own terms and privacy policies.
We will never share your data with anyone else unless the law requires it.
5. Transfers outside the European Union
To keep the questionnaire working and protected, Tally uses two service providers based in the United States: Cloudflare (protection against spam and abuse) and Sentry (error monitoring). They may process technical data such as your IP address and browser details. These transfers are covered by Standard Contractual Clauses approved by the European Commission (Decision (EU) 2021/914).6. How long we keep it
- If you do not become a client: we delete your data 3 months after our last contact.
- If you become a client: we keep it for as long as we provide our services, and afterwards for the periods required by law (for example, tax and accounting obligations).
We export questionnaire answers from Tally and delete them there regularly, so they are not kept on the form provider's systems longer than needed.
7. Your rights
You can ask us at any time to:
- see the data we hold about you (access);
- correct it (rectification);
- delete it (erasure);
- limit how we use it (restriction);
- receive it in a common format or have it sent to another company (portability);
- stop using it (objection).
Write to info@alonkeys.com. We will reply as soon as possible, and always within one month. We may ask you to confirm your identity first.
If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es). We would appreciate the chance to resolve it with you first.
8. How we protect it
We collect only the data we need, prefer providers that store data in the European Union, protect our accounts with two-factor authentication, and never ask for access codes or passwords through forms or email.
9. Changes to this notice
If we change this notice, we will publish the new version on this page with a new date. If the change is significant, we will tell you directly.