DATA PROTECTION
Privacy policy
How we collect, process and protect the personal data you provide to us via this website.
GDPR (EU) 2016/679 and LOPDGDD 3/2018 · Last updated: 9 September 2026
EN ESTA PÁGINA
01
Data controller
In accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights, we hereby provide details of the data controller responsible for the data collected on this website.
RESPONSIBLE
[NOMBRE COMPLETO]
NIF / CIF
[NIF o CIF]
ADDRESS
[Calle]
[CORREO@GMAIL.COM]
PHONE
[+34 000 000 000]
DATA PROTECTION OFFICER
[NO PROCEDE / DATOS DE CONTACTO]
02
Why do we process your data?
The personal data you provide to us via the contact form, by email or by telephone is processed for the following purposes:
To respond to your enquiry, request for information or request for a quote regarding our architectural services.
To draw up and send you technical and financial proposals, and to keep in touch during the pre-contract phase.
To manage the professional, contractual and administrative aspects of the relationship should the assignment be confirmed.
To comply with any applicable legal, tax, accounting and professional obligations.
To send you information about our projects and services, only if you have given your express consent.
Your data is not processed for profiling purposes, nor are any automated decisions taken that have legal effects on you.
03
Legal basis for processing
The lawfulness of the processing is based, depending on the circumstances, on the following legal grounds set out in Article 6 of the GDPR:
Consent of the data subject — when submitting the contact form or subscribing to communications.
Performance of a contract — or pre-contractual steps, when you request a quote or complete the order form.
Compliance with legal obligations — tax, commercial, technical and building regulations.
Legitimate interest — for the protection of our rights and the day-to-day management of our professional activities.
04
How long do we keep the data for?
Enquiry data that does not result in an engagement is retained for a maximum of [12] months from the last contact, unless you request its deletion before then.
Once the engagement has been formalised, the data is retained for the duration of the professional relationship and, thereafter, for the applicable statutory limitation periods: six years under commercial law, four years under tax law, and up to ten and fifteen years in relation to liability for construction defects in accordance with Law 38/1999 on Building Regulations.
Once these periods have elapsed, the data is securely deleted or anonymised.
05
Who do we share your data with?
No data is disclosed to third parties unless required by law. However, the suppliers necessary to provide the service do have access to the data, in their capacity as data processors and under a contract signed in accordance with Article 28 of the GDPR:
Web hosting and email provider: [PROVIDER NAME].
Tax, accounting and employment consultancy: [NAME OF THE CONSULTANCY].
Banks, for the management of collections and payments.
Public authorities and professional bodies, where required by the project process (approval, licences, certificates).
External technical consultants —quantity surveyors, engineering firms, surveyors— only when they are involved in your project.
No international data transfers outside the European Economic Area are planned. Should such transfers become necessary in the future, they will be carried out in accordance with the safeguards set out in Chapter V of the GDPR.
06
What are your rights?
You may exercise the following rights at any time, free of charge:
Right of access — to find out what personal data we process about you and for what purpose.
Rectification — correcting inaccurate or incomplete data.
Deletion — request their removal when they are no longer required.
Objection — to object to processing based on a legitimate interest.
Restriction — requesting that processing be suspended whilst a complaint is being investigated.
Data portability — receiving your data in a structured, commonly used format.
Withdrawal of consent — at any time, without retroactive effect.
To exercise these rights, please write to [HOLA@DOMINIO.COM] or to [STREET AND NUMBER], [POST CODE] [CITY], stating which right you are exercising and enclosing a copy of your identity document. We will reply within one month at the latest.
If you consider that the processing of your data does not comply with the regulations, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid — www.aepd.es).
07
Data security
We have implemented the appropriate technical and organisational measures to ensure a level of security commensurate with the risk: an encrypted connection using an SSL certificate, access controls, regular backups, software updates and a confidentiality undertaking from staff and contractors.
In the event of a data breach that poses a high risk to your rights, we will inform you without undue delay and notify the supervisory authority within 72 hours.
08
Mandatory nature of the data
The fields marked as compulsory on the form are essential for processing your request; if you do not provide them, we will be unable to respond to your enquiry. The remaining details are optional and omitting them will have no consequences.
You guarantee that the details provided are accurate and undertake to notify us of any changes. If you provide details relating to third parties, you must have informed them in advance of the contents of this policy.
09
Changes to this policy
This policy may be updated to reflect changes in legislation, case law or our business activities. The current version is the one published on this page, which states the date of its last update.
The use of cookies and tracking technologies is set out in a separate document.