01Data controller
The data controller is PT VALENTINA VILLA LOMBOK, an Indonesian limited company (PT) with PMA (foreign investment) status (hereinafter, Marlaca), trading under the Marlaca Real Estate brand. NIB: 0220207151838 · NPWP: 0938 0329 3591 5000. Registered address: Dusun Mengalung, Desa/Kelurahan Kuta, Kec. Pujut, Kab. Lombok Tengah, Provinsi Nusa Tenggara Barat, 83573, Indonesia. You can write to us at info@marlacarealestate.com on any matter relating to your data.
02What data we process
The data you give us when you request a call (the questionnaire on the “Book a call” page, which is also embedded on the home, contact, Aurea Wellness and Land pages): your answers (what interests you, the approximate amount you plan to invest and your timeframe), name, WhatsApp number and email. We also record where your visit came from (UTM parameters, ad click identifiers such as fbclid or gclid, referring page and the page you wrote to us from). If you accept cookies, Google Analytics and Meta also collect browsing data (see “Cookies and analytics”). We do not ask for bank details or identity documents on the website.
03What we use it for
To respond to your request, arrange the call with Lucía or email you the relevant information about our projects. We use your answers to calculate an internal score that helps us prioritise how we reply (a call, information by email, or a notice if we open options with a lower entry amount). We do not build advertising profiles with that score.
04Legal basis
Your consent, which you give by submitting the questionnaire, and the performance of pre-contractual measures at your request. For analytics and advertising cookies, your consent through the cookie banner. You may withdraw your consent at any time.
05Who we share it with
Your data is sent to the following providers: (a) Kommo, the CRM where we manage requests, through the break-api service, operated by our marketing provider Break, which acts as a data processor; (b) Google Sheets (Google LLC), a spreadsheet we use as a backup of requests; (c) only if you accept the relevant cookies, Google Analytics (Google LLC) and the Meta Pixel and Conversions API (Meta Platforms, Inc.); when you request a call, the Conversions API sends Meta, through the break-api server, an event with your email, phone number and name to attribute the conversion. Some of these services may process data on servers outside the European Economic Area (for example, in the United States) and in Indonesia, where Marlaca is based. We do not sell your data or pass it to third parties for commercial purposes. We only disclose it when a legal obligation requires it or when you expressly ask us to speak with a notary, lawyer or adviser.
06How long we keep it
For as long as the business relationship lasts and, afterwards, for the period during which liabilities may arise. If no relationship is established, we delete it twelve months after the last contact.
07Your rights
You may access your data, rectify it, erase it, object to its processing, restrict it, request its portability and withdraw your consent. Write to us at info@marlacarealestate.com and tell us which right you wish to exercise. If you believe we have not handled your data properly, you may complain to the Spanish Data Protection Agency (AEPD, aepd.es) or to your local data protection authority. If you live in the United Kingdom, that is the Information Commissioner’s Office (ICO, ico.org.uk).
08Cookies and analytics
This website uses technical cookies and, only if you authorise it in the banner, analytics cookies (Google Analytics 4) and advertising cookies (Meta Pixel and Conversions API). Until you accept, nothing from Google or Meta is loaded. You can change your decision at any time with the “Cookie settings” link in the footer. See the cookie policy for details. If you accept analytics, Google Analytics measures use across this website and our landing page (marlaca-realestate.com) and may add a parameter (_gl) to links between the two. Links to WhatsApp, Instagram and LinkedIn lead to third-party services with their own policies.
09Security
We apply reasonable technical and organisational measures to protect your data against unauthorised access.
10Changes
We may update this policy. The current version is the one published on this page, with its date.