Template status: confirm the controller, processors, retention periods, analytics and international transfers before publishing.
Last updated: [DD/MM/YYYY]
1. Controller
The controller responsible for this website is [LEGAL BUSINESS NAME], P.º de Méjico, 31, 29604 Marbella, Málaga, Spanien. Privacy contact: [PRIVACY CONTACT EMAIL].
2. Information we may collect
Depending on how you use the website, we may process:
- contact and identification details you provide;
- property location, project type, approximate size, timing, budget range and message content;
- technical request data such as IP address, browser, device, referral page and access time;
- records needed to prepare quotations, enter into contracts, deliver work and meet legal obligations.
3. Purposes and legal bases
Personal data may be processed to respond to enquiries, prepare requested quotations, take steps before a contract, perform a contract, operate and secure the website, comply with legal obligations and pursue legitimate interests such as service improvement and fraud prevention. Consent is used where the law requires it, including for non-essential analytics or marketing.
4. WhatsApp and other communication channels
When you select a WhatsApp link, you leave this website and communicate through a third-party service. WhatsApp/Meta processes information under its own terms and privacy policy, which may involve transfers outside the European Economic Area. Only send information that is necessary for the enquiry; do not send sensitive documents until a secure channel has been agreed.
5. Hosting and server logs
The website is hosted by [HOSTING PROVIDER NAME AND ADDRESS]. The hosting provider may process technical logs required to deliver, protect and troubleshoot the service. Confirm the actual provider, processing location, data-processing terms and log-retention period before launch.
6. Cookies, analytics and embedded media
The current build is designed without operator-controlled advertising or analytics cookies. If analytics, pixels, maps, videos, chat widgets or other third-party embeds are enabled later, this policy and the cookie policy must be updated and any legally required consent must be obtained before those services load.
7. Recipients and international transfers
Data may be shared only where necessary with hosting, IT, communications, professional advisers, appointed subcontractors, authorities or other suppliers involved in the enquiry or project. [LIST ALL ACTUAL PROCESSORS]. Where data leaves the EEA, record the applicable adequacy decision, standard contractual clauses or other lawful safeguard.
8. Retention
Enquiry data is retained only for as long as necessary to answer the request and manage follow-up. Contract, invoice and statutory records are retained for the legally required periods. Confirmed schedule: [CONFIRMED RETENTION PERIOD].
9. Your rights
Subject to applicable law, you may request access, rectification, erasure, restriction, portability or objection, and may withdraw consent at any time without affecting earlier lawful processing. Send requests to [PRIVACY CONTACT EMAIL]. You may also complain to the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.
10. Security, minors and updates
Appropriate organisational and technical safeguards are used, but no internet transmission is risk-free. This website is not directed at children and project enquiries should be submitted by adults. This policy may be updated when services, suppliers or legal requirements change; the current version and date should be shown here.