HomePrivacy policy
Legal
Privacy policy.
Last updated: [date]. Template to be reviewed by an accountant (gestoría) or a lawyer before publishing. Translation for information only; the Spanish version prevails.
On this page
A question about your data?
1. Data controller
Your data is processed by:
| Owner | [Achraf Elotmani / Company name] |
|---|---|
| Trade name | Epicuria Studio (and its brand Epicuria Property) |
| NIF / CIF (Tax ID) | [NIF] |
| Registered address | [Address], [Postcode] [City], Málaga |
| contact@epicuriastudio.com | |
| Phone | [Phone] |
| Website | epicuriastudio.com |
2. What data we process
Only the data you provide to us:
- Contact form: name, business, email, phone or WhatsApp (optional), city, type of service and message.
- WhatsApp, email or phone: the data and messages you send us through those channels.
- Call booking: [if Calendly, Cal.com or Google Calendar is installed, state here the data it collects and the provider].
We do not collect special categories of data or data relating to minors.
3. What we use it for
- To respond to your request and prepare a proposal or quote for you.
- To arrange the call you book with us.
- If you become a client, to manage the contractual relationship, invoicing and legal obligations.
We do not send commercial communications without your prior consent and we do not make automated decisions using your data.
4. Legal basis
- Consent (Art. 6.1.a GDPR): when you tick the box on the form or write to us.
- Pre-contractual measures and contract (Art. 6.1.b GDPR): quotes and provision of the service.
- Legal obligation (Art. 6.1.c GDPR): tax and accounting obligations.
5. How long we keep it
Contact data is kept for as long as necessary to respond to your request and, if you do not become a client, [for a maximum of 12 months]. Client data is kept for the duration of the contractual relationship and, afterwards, for the periods required by law (for example, for tax purposes).
6. Recipients
We do not share your data with third parties, except where legally required. To provide the service we use providers acting as data processors, under contract and with safeguards:
- Web hosting: [hosting provider, e.g. Hostinger — to be verified].
- Messaging: WhatsApp (Meta), if you write to us through that channel.
- [Booking tool, email and others, if applicable].
[State whether any of these providers involves international transfers and with what safeguards.]
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to contact@epicuriastudio.com and stating the right you wish to exercise.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es).
8. Security
We apply reasonable technical and organisational measures to protect your data against loss, unauthorised access or misuse.