Privacy policy

Data controller

Controller: Gerardo Melo S.L. · Tax ID (NIF): B16734675 · Address: C/ Franconia, 21, 07688 Cala Murada (Manacor), Illes Balears · Email: [email protected] · Telephone: +34 669 626 128.

This Privacy Policy governs the processing of personal data carried out by Gerardo Melo S.L. through the website gerardomeloconstrucciones.com, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPDGDD).

Data we process

Through the Website's contact form we may collect the following data:

• Name.
• Email address.
• Telephone number (optional field).
• The content of the message the user chooses to send us.

If the user makes contact by telephone, WhatsApp or email, we will process the data provided by those means.

No special category data is collected. There is no need to provide third-party data; if the user provides another person's data, they must have informed that person beforehand of the terms of this Policy.

Purpose of processing

Data is processed for the following purposes:

• To handle and respond to enquiries and requests for information.
• To prepare and send quotations.
• To manage the pre-contractual and, where applicable, contractual relationship arising from a commissioned project.

No automated decision-making or profiling takes place. Data is not used to send marketing communications unless the data subject has given express, separate consent.

Legal basis

• Consent of the data subject (art. 6.1.a GDPR), given by voluntarily submitting the form or making contact by other means.
• Performance of pre-contractual measures and of a contract (art. 6.1.b GDPR), where the enquiry leads to a quotation or a commission.
• Compliance with legal obligations (art. 6.1.c GDPR), particularly in tax, accounting and building-regulation matters.

Whether providing the data is required

The fields marked as required in the contact form (name, email address and message) are necessary in order to deal with the enquiry. Providing them is voluntary, but without them we cannot reply or prepare a quotation.

The telephone number is an optional field and is used only if a reply by that route is preferred. There is no statutory or contractual obligation to provide this data.

Retention period

Data is retained for as long as necessary to deal with the request. If the enquiry does not lead to a commission, the data is deleted one year after the last contact.

If a contract is entered into, data is retained for the duration of the relationship and thereafter for the periods required by tax, accounting and liability law, including the warranty periods set out in Spanish Law 38/1999 of 5 November on Building Regulation.

Recipients and international transfers

Data is not disclosed to third parties except where legally required. The following providers are used to deliver the service and act as data processors:

• Cloudflare, Inc. — website hosting, content delivery network, security and aggregate audience measurement.
• Formspree, Inc. — processing and delivery of messages sent through the contact form.

Both providers are located outside the European Economic Area (United States). These international transfers are covered by the Standard Contractual Clauses approved by the European Commission and, where applicable, by the EU-US Data Privacy Framework.

Rights of the data subject

Users may exercise the following rights at any time:

• Access to their personal data.
• Rectification of inaccurate data.
• Erasure of data when it is no longer necessary.
• Objection to processing.
• Restriction of processing.
• Data portability.
• Withdrawal of consent at any time, without affecting the lawfulness of prior processing.

To exercise them, simply send a request to [email protected], stating the right you wish to exercise and enclosing a copy of an identity document.

Users also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es), particularly if they consider that their rights have not been satisfactorily addressed.

Security

Gerardo Melo S.L. adopts appropriate technical and organisational measures to ensure the security of personal data and prevent its alteration, loss, unauthorised processing or access. The Website uses an encrypted connection (HTTPS) on all its pages.

Minors

The Website is not directed at children under fourteen. Gerardo Melo S.L. does not knowingly collect personal data from children under that age.

Changes to this policy

This Privacy Policy may be updated to reflect regulatory changes or the evolution of the Website. Periodic review is recommended. The date of the last update appears at the top of this document.