⊕ Visa to Keys by Yana SKS

Privacy Policy

Last updated: 11 October 2026

1. Who we are

Data Controller:

  • Name: Yana Sokosyuk
  • Trading as: Visa to Keys (by Yana SKS)
  • Tax ID (NIF): X5944677M
  • Registered address: Calle Río Sangonera 4, 2B, 30740 San Pedro del Pinatar, Murcia, Spain
  • Email: yana@visatokeys.com
  • Phone: +34 622 308 875
  • Professional qualification: Official Sanitas Health Insurance Agent, Agent Code C0320X5944677M

Visa to Keys ("we", "us", "our") is committed to protecting your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Spanish Organic Law 3/2018 on Data Protection (LOPDGDD), and all other applicable data protection laws.

2. Data we collect

When you request a quote or interact with our website, we may collect:

  • Identification data: full name, date of birth, nationality.
  • Contact data: email address, phone/WhatsApp number, city/postcode in Spain.
  • Insurance-related data: number of people to insure, visa type, start date needed, prior health insurance (if any).
  • Technical data: IP address, browser type, device, pages visited, referral source (via cookies and analytics tools).
  • Marketing data: advertising campaign source (UTM parameters), consent preferences.

We do not collect sensitive health data through this website. Any health information required for your insurance policy is handled directly by Sanitas through their secure channels.

3. How we use your data

We process your personal data for the following purposes:

  • To prepare your personalised insurance quote and respond to your enquiry.
  • To follow up on your enquiry via email, phone, or WhatsApp.
  • To manage your policy if you decide to proceed with Sanitas.
  • To send relevant commercial communications about Sanitas health insurance products (you may unsubscribe at any time).
  • To comply with legal and regulatory obligations as a Sanitas Agent.
  • To improve our website and advertising effectiveness (analytics).

4. Legal basis for processing

We rely on the following legal bases:

  • Legitimate interest (Art. 6.1.f GDPR): to respond to your quote request and send relevant commercial follow-ups.
  • Your consent (Art. 6.1.a GDPR): for marketing communications, cookies, and advertising personalisation.
  • Performance of a contract (Art. 6.1.b GDPR): once you contract an insurance policy through us.
  • Legal obligation (Art. 6.1.c GDPR): to comply with insurance and tax regulations.

5. Who we share your data with

We only share your data with:

  • Sanitas S.A. de Seguros — to issue and manage your health insurance policy.
  • Our CRM provider (HubSpot Inc.) — to manage leads and communications. HubSpot operates with EU data residency and GDPR-compliant safeguards.
  • Email and marketing providers (Microsoft 365, Zapier, Netlify) — strictly to deliver our services.
  • Advertising platforms (Meta, Google Ads) — only if you consent to marketing cookies.
  • Public authorities — when required by law.

We do not sell your personal data to third parties.

6. International transfers

Some of our service providers (e.g. HubSpot, Google, Meta) may process data outside the European Economic Area. In all cases we rely on Standard Contractual Clauses approved by the European Commission or on providers certified under equivalent safeguards.

7. How long we keep your data

  • Enquiries without contract: up to 24 months, unless you request earlier deletion.
  • Clients with active policy: for the duration of the policy and up to 6 years after termination (legal/tax obligations).
  • Marketing data: until you unsubscribe.

8. Your rights

Under GDPR, you have the right to:

  • Access your personal data (right of access).
  • Request correction of inaccurate data (rectification).
  • Request deletion of your data (right to be forgotten).
  • Request restriction of processing.
  • Object to processing based on legitimate interest.
  • Request data portability.
  • Withdraw your consent at any time.

To exercise any of these rights, contact us at yana@visatokeys.com. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe your rights have been violated.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure, including encryption in transit (HTTPS), access controls, and secure hosting.

10. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page with the updated date.

11. Contact

For any questions about this Privacy Policy or how we handle your data:

Email: yana@visatokeys.com
Phone / WhatsApp: +34 622 308 875