North Coast Vacations, Inc., doing business as Calisto Stays, Calisto Realty, Calisto Home Services, Calisto Tasks, Calisto Projects, Calisto Partners, Calisto Concierge and Calisto Guest Services (collectively referred to as "Calisto," "we," "our," or "us"), is committed to protecting the privacy and personal data of its customers, partners, and website users in compliance with the General Data Protection Regulation (EU) (2016/679) ("GDPR") and the Spanish Data Protection and Digital Rights Act 3/2018 (the “Data Protection Act”). This Privacy Policy outlines how we collect, process, and protect personal data.

1. DATA CONTROLLER 

The data controller for North Coast Vacations, Inc. is Luna Limpiezas North Coast, SLU, a Spanish business registered at C/ Zurbano 45 Piso 1, Madrid 28010, Spain, with company ID B72574890. 

2. SCOPE OF THIS POLICY
This Privacy Policy applies to all personal data collected through our websites, mobile applications, and services related to Calisto Stays, Calisto Realty, and Calisto Home Services, including communication by email, phone, or direct interaction.

3. WHAT PERSONAL DATA DO WE COLLECT?
We may collect the following categories of personal data:

a. Personal Identification Data:
Full Name
Email Address
Phone Number
Postal Address
 

b. Financial Data:
Payment Information (processed through third-party providers such as Stripe and PayPal).
 

c. Website Usage Data:
IP Address, Cookies, Device Information, Browser Type, and Usage Patterns.
 

d. Sensitive Data:
We do not intentionally collect sensitive personal data unless required by law or with explicit consent.

4. HOW WE USE PERSONAL DATA
We process personal data for the following purposes based on legal grounds:
 

Purpose / Legal Basis / Collected Data

Customer Support & Service Delivery /Contractual Obligation / Name, Contact Information

Marketing & Newsletters / Consent /Email Address

Website Functionality & Analytics / Legitimate Interest, Consent / IP Address, Cookies

Property Management & Sales / Contractual Obligation, Legal Duty / Full Customer Profile

Fraud Prevention & Security / Legitimate Interest / Device Data, IP Address

Compliance with Legal Obligations / Legal Duty / Relevant Personal Data

5. HOW WE COLLECT PERSONAL DATA
We collect data in the following ways:
Direct interactions via forms, email, or phone.
Automated technologies like cookies and tracking tools.
Third-party integrations (e.g., booking platforms, payment processors).

6. SHARING PERSONAL DATA
We share personal data with:
a. Service Providers: Payment processors, hosting services, and IT providers.
b. Business Partners: Affiliate partners, real estate agents, and co-marketing partners.
c. Legal Authorities: When required by law.
 

We ensure all third parties follow strict data protection protocols.

7.DATA TRANSFERS OUTSIDE THE EU
Where data transfers outside the European Union are necessary due to our global operations, including staff access in the Dominican Republic, the Philippines and Colombia, we ensure compliance with data protection standards by relying on:
a. European Commission Adequacy Decisions
b. Standard Contractual Clauses (SCCs)
c. Binding Corporate Rules (BCRs)
 

We implement additional safeguards, such as secure access controls, encrypted communications, and data minimization practices to protect personal data regardless of where it is accessed.

8. DATA SECURITY
We implement appropriate technical and organizational measures to secure personal data, including:
Data encryption (HTTPS protocols)
Secure servers hosted in the EU
Access control and restricted permissions

9. DATA RETENTION
We retain personal data only as long as necessary for the purposes outlined in this policy, or as required by law. When retention is no longer necessary, data will be securely deleted or anonymized.

10. YOUR PRIVACY RIGHTS
You have the following rights under GDPR:
Access: Request confirmation and a copy of personal data we hold.
Correction: Request correction of inaccurate or incomplete data.
Erasure: Request deletion of your data when legally permissible.
Objection: Object to data processing based on legitimate interest.
Portability: Receive your data in a commonly used format.
Withdraw Consent: Revoke marketing consent at any time.
To exercise these rights, contact us at: info@northcoastvacations.com

11. COOKIES & TRACKING TECHNOLOGY
We use cookies to enhance your experience and analyze site performance. For detailed information, see our Cookie Policy at https://www.calistoservices.com/cookies

12. MINORS´ DATA
Our services are not directed at individuals under 16 years of age. If we become aware of collecting personal data from minors, we will take immediate steps to delete such data.

13. POLICY UPDATES
We may update this Privacy Policy periodically. The latest version will be posted on our websites, with the revision date clearly indicated.

14. CONTACT US
If you have any questions or concerns about this policy or data protection practices, contact us at:
Email: info@northcoastvacations.com

Mailing Address: Pedro Clisante 73, El Batey, Sosua, Dominican Republic 57000
Spain Office: C/ Zurbano 45 Piso 1, Madrid, Spain 28010

Thank you for trusting Calisto with your personal data.