.png)
This notice explains how Vista Ventures Limited collects, uses and protects personal data, and the rights you have over your information. It applies to this website, to guests staying in our properties, and to property owners who contact us about working together.
Vista Ventures Limited is a company registered in Gibraltar, company number 123956. We provide short-stay accommodation in Gibraltar and work with property owners to let and manage their apartments.
For the purposes of the Gibraltar GDPR and the Data Protection Act 2004, Vista Ventures Limited is the data controller for the personal data described in this notice. This means we decide why and how your personal data is used, and we are responsible for looking after it.
If you have any questions about this notice, or about how we handle your personal data, you can email us at info@vistaventures.gi or call +350 540 02060.
We only collect the information we need. Depending on how you deal with us, this may include:
Your name, email address, telephone number, booking dates, the property you are staying in, any requests or requirements you tell us about, and the messages you send us. Where a booking is made through Booking.com or Airbnb, we receive your details from that platform.
Your name, email address, telephone number, the location and details of your property, and anything else you choose to tell us in your enquiry.
The contact details you give us and the content of your message, by whichever method you get in touch.
We do not ask for special category data, such as information about health, religion or ethnicity. Please do not send us this kind of information unless it is genuinely necessary, for example an accessibility requirement for your stay.
Under the Gibraltar GDPR we must have a lawful basis for using your personal data. Ours are set out below.
Arranging arrival and departure, cleaning, maintenance, and answering your questions. Our lawful basis is performance of a contract with you, or taking steps at your request before entering into one.
Discussing terms and assessing whether a property suits our portfolio. Our lawful basis is taking steps at your request before entering into a contract, and our legitimate interest in running our business.
Keeping records, handling complaints and protecting our properties. Our lawful basis is our legitimate interests, balanced against your rights.
Tax, accounting and any records we are required by law to keep. Our lawful basis is compliance with a legal obligation.
We do not sell your personal data, and we do not use it for automated decision-making or profiling.
We share personal data only where it is necessary, and only with organisations required to keep it secure. These include:
Booking platforms such as Booking.com and Airbnb, where your reservation was made through them.
The property management and booking systems we use to coordinate stays, and the cleaning team who prepare the properties.
Our website, email and IT providers, who process data on our instructions.
Our accountants and professional advisers, and any authority we are legally required to share information with.
Some of these providers are based outside Gibraltar. Where personal data is transferred outside Gibraltar, we take steps to ensure it remains protected to the standard required by Gibraltar data protection law.
We keep personal data only for as long as we need it. Booking and guest records are kept for the period required by our tax and accounting obligations. Enquiries that do not lead anywhere are kept for a reasonable period and then deleted. Where we no longer need information, we delete it or dispose of it securely.
We take sensible steps to protect personal data from loss, misuse and unauthorised access, including limiting who can see it and using secure accounts and systems. If a data breach occurs that is likely to present a risk, we will report it to the Gibraltar Regulatory Authority without undue delay, and tell affected individuals where the law requires it.
This website is built on Webflow, which sets a small number of cookies necessary for the site to work and remain secure. These do not require your consent. If we later add cookies for analytics, advertising or tracking, we will ask for your consent first and give you a way to change or withdraw it at any time.
Under the Gibraltar GDPR you have the right to:
Be informed about how your personal data is used, which is the purpose of this notice.
Ask for a copy of the personal data we hold about you.
Ask us to correct information that is inaccurate or incomplete.
Ask us to delete your personal data, where we have no continuing reason to keep it.
Ask us to restrict how we use your personal data, or object to our using it.
Ask us to transfer certain data to you or to another provider.
Withdraw your consent at any time, where we rely on consent.
To exercise any of these rights, email us at info@vistaventures.gi. We will respond within one month. If your request is complex we may need up to two further months, and we will tell you if that is the case. There is normally no charge, and we may ask you to confirm your identity before releasing any information.
If you are unhappy with how we have handled your personal data, please contact us first so we can try to put it right. You also have the right to complain to the Gibraltar Regulatory Authority, which acts as Gibraltar's Information Commissioner, using the complaint form on its website at gra.gi.
We may update this notice from time to time to reflect changes in how we work, or in the law. The date at the top of the page shows when it was last updated.
