Privacy policy
In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD), we inform you about how we process your personal data.
1. Data controller
Controller: [YOUR FULL NAME]
Tax ID (NIF/NIE): [YOUR ID]
Address: [YOUR ADDRESS], Costa Blanca, Spain
Contact email: {{EMAIL}}
2. Purposes of processing
We process your personal data for the following purposes:
- To respond to enquiries and requests sent through the contact form, email, or WhatsApp.
- To provide the services you contract.
- To send commercial communications about our services, subject to your prior express consent.
- To comply with applicable legal obligations.
3. Legal basis
- Consent of the data subject for responding to enquiries and sending commercial communications.
- Performance of a contract to which the data subject is a party for service provision.
- Compliance with legal obligations regarding tax, accounting, and administration.
4. Retention period
We will keep your data for as long as necessary to fulfil the stated purposes. When no longer needed, we will delete it with appropriate security measures. Data related to services provided will be retained for the legally required periods.
5. Recipients
We do not share your data with third parties except where legally required. We work with the following providers who may process data on our behalf as data processors, with all GDPR-required safeguards:
- Website hosting provider (e.g., Netlify, Vercel, Cloudflare).
- Email provider (e.g., Google Workspace).
- Web analytics tools (where applicable, subject to consent).
6. International transfers
Some of the listed providers may be located outside the European Economic Area. In such cases, we have appropriate safeguards in place (standard contractual clauses approved by the European Commission or other legal mechanisms).
7. Data subject rights
As the data subject, you have the right to:
- Access your personal data.
- Request rectification of inaccurate data.
- Request deletion when data is no longer necessary.
- Request restriction of processing.
- Object to processing.
- Request data portability.
- Withdraw consent at any time.
You can exercise these rights by writing to {{EMAIL}}.
8. Complaints to the supervisory authority
If you believe processing does not comply with current regulations, you may file a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es.
9. Security measures
We apply the technical and organisational measures necessary to guarantee the security and integrity of your data and prevent its alteration, loss, or unauthorised processing.
Note: Replace bracketed information with your actual data. Update this policy if you add new providers or tools (Google Analytics, Mailchimp, CRM, etc.). This template covers the essentials but consult a legal advisor before commercial operation.