Privacy Policy

1. Data controller

The data controller responsible for your personal data is:

• Legal name: [PLACEHOLDER: company legal name]
• Registered address: [PLACEHOLDER: registered address]
• CIF/VAT: [PLACEHOLDER: CIF/VAT number]
• Contact email: [PLACEHOLDER: contact email]
• Data Protection Officer / privacy contact: [PLACEHOLDER: DPO contact]

2. Data we process

We only process the data needed to run this website and respond to you:

• Contact details you submit through the contact form or by email: name, email address, company (optional), the service you are interested in and the content of your message.
• Technical data generated when you browse: IP address, browser and device type, pages visited, approximate time of access and referring page. Part of this data is processed by our hosting provider in server logs.
• Preferences stored in your browser: language, colour theme and your cookie choice (see the Cookie Policy). These values never leave your device.
• Communication data if you choose to contact us through WhatsApp or email, processed by the respective provider under its own terms.

3. Purposes and legal basis

• Answering your enquiry and preparing a proposal — steps prior to entering into a contract at your request (Art. 6(1)(b) GDPR).
• Operating, securing and improving the website — our legitimate interest in running a reliable service (Art. 6(1)(f) GDPR).
• Optional analytics or marketing cookies, if any are introduced — your consent, which you may withdraw at any time (Art. 6(1)(a) GDPR).
• Complying with legal obligations, such as accounting rules or lawful requests from authorities (Art. 6(1)(c) GDPR).

4. Retention

Enquiry data is kept while we handle your request and for up to [PLACEHOLDER: retention period, e.g. 24 months] afterwards, unless a contract follows, in which case it is retained for the duration of the relationship and the statutory limitation periods. Server logs are kept for a short technical period defined by our hosting provider. Browser preferences remain on your device until you clear them.

5. Recipients and third parties

We do not sell personal data. We share it only with providers who help us operate the site, under contracts that meet Article 28 GDPR:

• Hosting and content delivery: [PLACEHOLDER: hosting provider].
• Email service used to receive your enquiries: [PLACEHOLDER: email provider].
• Google Fonts (Google LLC) delivers the Arabic web font; your browser requests it directly from Google's servers, which receive your IP address.
• WhatsApp (Meta Platforms) if you choose to contact us through that channel.

Where a provider processes data outside the European Economic Area, we rely on an adequacy decision or the European Commission's Standard Contractual Clauses.

6. Your rights

Under the GDPR you may at any time:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten") where there is no overriding reason to keep it.
• Restrict processing in the circumstances set out in Article 18.
• Receive your data in a portable, machine-readable format.
• Object to processing based on legitimate interest, and to any direct marketing.
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, write to [PLACEHOLDER: contact email]. We reply within one month. You may also lodge a complaint with your supervisory authority — in Spain, the Agencia Española de Protección de Datos (www.aepd.es). [PLACEHOLDER: confirm the competent authority once the company is registered]

7. Security

We apply technical and organisational measures appropriate to the risk — encrypted connections (HTTPS), access control and minimal data collection. No system is perfectly secure; if a breach affecting your rights occurs, we will notify you and the authority as required by Articles 33 and 34 GDPR.

8. Cookies

This website uses only strictly necessary browser storage by default. Any optional cookies require your prior consent, which you can give or withdraw through the banner. Full details are in our Cookie Policy.

9. Changes to this policy

We may update this policy to reflect legal or operational changes. The date at the top shows the latest revision; material changes will be highlighted on this page.

10. Contact

Questions about privacy: [PLACEHOLDER: contact email] · [PLACEHOLDER: DPO contact] · [PLACEHOLDER: registered address].