Privacy Policy

Last updated: 10 June 2026

This policy explains what personal data is collected on spaziocarbe.com, why, and what rights you have under the EU General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD).

1. What data we process

• Contact form: first name, last name, email address, the package you are interested in, your message, and — when you arrive from a price calculator — the approximate size (m²) and estimated price you configured, plus your language.
• Direct contact: if you write by email, WhatsApp, Instagram or LinkedIn, we process the contact details and content you choose to send.
• Purchases: payments are handled by Stripe. We receive your name, email and what you purchased. Your card details are processed by Stripe only and never reach our systems.
• Technical data: the hosting and CDN infrastructure processes your IP address and browser information transiently to deliver the site securely (including anti-spam rate limiting on the contact form).
• Analytics (only with your consent): Google Analytics 4 with pseudonymous identifiers and IP anonymisation — see section 6.

2. Purposes and legal bases

• Answering your enquiry — pre-contractual measures at your request (art. 6.1.b GDPR).
• Providing the purchased services and invoicing — performance of a contract (art. 6.1.b) and legal obligations, including tax law (art. 6.1.c).
• Site security and abuse prevention — legitimate interest (art. 6.1.f).
• Audience measurement — your consent (art. 6.1.a), which you can withdraw at any time.

3. How long we keep your data

• Enquiries that do not lead to a contract: up to 12 months after the last exchange.
• Contract and invoicing data: for the periods required by Spanish commercial and tax law (up to 6 years).
• Analytics data: up to 14 months.
• Anti-spam traces (hashed IP): minutes.

4. Who receives your data

We never sell your data. It is shared only with service providers acting as processors, with appropriate safeguards:

• IONOS SE (Germany, EU) — web hosting and email.
• QUIC.cloud — content delivery network (transient IP processing; international transfers covered by contractual safeguards).
• Stripe Payments Europe, Ltd. (Ireland) — payment processing; possible transfers to Stripe, Inc. (USA) under the EU–US Data Privacy Framework and standard contractual clauses.
• Google Ireland Ltd. — Google Analytics 4, only after consent; possible transfers to Google LLC (USA) under the EU–US Data Privacy Framework.
• The controller's accounting advisors, for tax and bookkeeping obligations.

5. Your rights

You can request access to your data, rectification, erasure, restriction of processing, portability, and object to processing based on legitimate interest. Where processing relies on consent, you can withdraw it at any time without affecting prior processing. Write to info@spaziocarbe.com; we may ask you to confirm your identity. You also have the right to lodge a complaint with the Spanish supervisory authority, AEPD, or with the authority of your EU country of residence.

6. Cookies and local storage

No cookies are set before you give consent.

The site uses the browser's local storage for strictly functional purposes, exempt from consent:

• spaziocarbe-lang — remembers your language choice.
• spaziocarbe-wa-dismissed — remembers that you closed the WhatsApp bubble.
• cookieConsent — records your cookie choice (accepted/rejected).

Only if you click Accept on the cookie banner, Google Analytics 4 is loaded and sets the following cookies:

• _ga, _ga_* — distinguish visitors for statistics; duration up to 2 years.

You can change your choice at any time via the “Cookie Preferences” link in the footer, which reopens the banner, or by deleting the site data in your browser.

7. Security

The site is served exclusively over HTTPS. Access to enquiry and customer data is restricted to the controller and protected by authentication.

8. Minors

The services are intended for adults (18+). We do not knowingly process data of minors.

9. Changes to this policy

Any update will be published on this page with a new date. Significant changes will be highlighted on the site.