Privacy policy
Last updated:
This policy explains how we process your personal data when you visit this website or contact us, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on data protection and digital rights (LOPDGDD).
Data controller
- Controller
- Reformas Romero-Vera S.L.
- Tax ID (NIF)
- B75621615
- Registered address
- Avenida Barcelona, 10, esc. 1, 2.º 1.ª, 08338 Premià de Dalt (Barcelona)
- Registry details
- Registro Mercantil de Barcelona, sección 8.ª, hoja B-627055, inscripción 1.ª
- reformasintegralesgabrielromero@hotmail.com
- Phone
- +34 658 09 40 37
What data we process
- Data you give us when you contact us by WhatsApp, phone or email: name, phone number, email, town or address of the job, description of the work, comments and any photos you choose to send.
- The “Calculate an estimate” form sends nothing to our server: it uses your answers to prepare a WhatsApp message that only reaches us if you decide to send it.
- Technical visit data: like any web server, ours logs the IP address, date and time, requested page and browser type.
- Website usage data, only if you accept analytics cookies: pages viewed, clicks on the WhatsApp buttons, where the visit came from, device type and approximate location, collected by Google Analytics.
We do not need special categories of data (health, beliefs, etc.); please do not include them in your messages.
Why we use it and on what legal basis
- To answer your enquiry, visit the property and prepare the estimate. Basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
- To carry out the contracted work, invoice it and handle the guarantee. Basis: performance of the contract (Art. 6(1)(b) GDPR) and compliance with legal, tax and accounting obligations (Art. 6(1)(c) GDPR).
- To keep the website secure and prevent abuse, using server logs. Basis: legitimate interest (Art. 6(1)(f) GDPR).
- To see how many people visit the website and which pages they view, with Google Analytics. Basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via “Cookie settings” at the bottom of every page.
We do not send you advertising or make automated decisions about you.
How long we keep it
- Enquiries and estimates not accepted: up to one year from the last contact.
- Customers: for the duration of the relationship and then for the legal periods (six years for commercial and accounting records, four years for tax purposes) and the liability period for the work.
- Server logs: only as long as needed for security; they are deleted by regular log rotation.
- Google Analytics data: up to 14 months; the cookies expire after 2 years or when you delete them.
Who we share it with
We do not sell or give away your data. We only share it with public authorities where the law requires and with providers that supply services to us, under a data processing agreement:
- OVHcloud: website hosting on servers located in the European Union.
- Microsoft (Outlook / Hotmail): email.
- Our tax and accounting advisers, to meet tax obligations.
- Google Ireland Limited (Google Analytics): visit statistics, only if you accept analytics cookies. Google privacy policy.
If you write to us on WhatsApp, the messages pass through WhatsApp Ireland Limited (Meta group), which processes them under its own privacy policy. Some of these providers may transfer data outside the European Economic Area; where they do, they use the safeguards required by the GDPR, such as the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to reformasintegralesgabrielromero@hotmail.com. If we are unsure of your identity, we will ask you to prove it. We will reply within one month.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD).
Children
This website is not aimed at children under 14 and we do not knowingly process their data.
Security
We apply appropriate technical and organisational measures: the website only works over an encrypted connection (HTTPS) and access to data is limited to the people who need it for their work.
Changes to this policy
We may update this policy when the way we process data changes. The date of the last update is shown at the top of the page.