Privacy policy

Data controller

• Owner: [TODO: owner's full legal name or company name]
• Tax ID (NIF/CIF): [TODO: tax ID (NIF/CIF)]
• Address: [TODO: postal address]
• Email: info@costablancareforma.com
• Website: costablancareforma.com

What data we process

We only process the data you enter in the contact form:

• Name
• Phone
• Email
• Town or area
• Type of work
• Message

Fields marked * are required: without them we can't reply to your request. This website does not collect personal data in any other way and does not use analytics or advertising cookies. Please don't include anything in your message that isn't needed for your request.

Cookie policy

Why we use it

To reply to your request and prepare the quote for the work. We don't use your data to send you advertising, we don't build profiles and we don't make automated decisions.

Legal basis

• Your consent (Art. 6(1)(a) GDPR), which you give by ticking the box on the form.
• Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR), such as preparing the quote.

You can withdraw your consent at any time by emailing info@costablancareforma.com. This does not affect the lawfulness of processing carried out before the withdrawal.

How long we keep it

We keep your data for as long as needed to handle your request. If we go on to sign a contract, we keep it for the duration of the relationship and then for the periods required by law. After that, we delete it.

Providers that process data on our behalf

To run the website and the form we work with the following providers, who act as data processors: they only process data on our instructions and to provide their service to us.

• Cloudflare: website hosting.
• Web3Forms: sending the contact form.
• Google: email.

We don't share your data with third parties or use it for advertising. We would only disclose it to a public authority if required by law.

International transfers

Some of these providers may process data outside the European Economic Area. In that case the transfer must be covered by the safeguards set out in the GDPR, such as a European Commission adequacy decision (for example, the EU-US Data Privacy Framework) or standard contractual clauses.

Your rights

You can exercise the following rights at any time:

• Access: find out whether we process your data and get a copy.
• Rectification: correct inaccurate or incomplete data.
• Erasure: ask us to delete your data.
• Objection: object to us processing your data.
• Restriction: ask us to keep your data only in certain cases.
• Portability: receive your data in a structured format or have us send it to another controller.

How to exercise them

Email us at info@costablancareforma.com saying which right you want to exercise. If we have reasonable doubts about your identity, we may ask for additional information to confirm it. We will reply within one month at the latest, which may be extended in the cases provided for in the GDPR.

Complaints to the supervisory authority

If you believe we haven't handled your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) or with the supervisory authority of the EU country where you live.

www.aepd.es

Changes to this policy

We may update this policy to reflect legal changes or changes in how the website works. The date of the last update is shown at the top of this page.