Privacy Policy

Data controller

• Controller: [FULL NAME]
• Spanish tax number (NIF): [NIF]
• Trading name: JaveaFix
• Address: [FULL ADDRESS]
• Telephone: +34 640 057 233
• Email: [EMAIL]

Given the nature and scale of the processing, appointing a Data Protection Officer is not required.

What we collect and why

Contact form and quotation requests

Data: name, telephone number, email address, the address or town where the property is, and whatever you tell us about the job.

Purpose: to answer your enquiry, prepare the quotation you asked for and, if you accept it, carry out the work and invoice it.

Legal basis: steps taken at your request before entering into a contract and, once the quotation is accepted, performance of that contract (Art. 6(1)(b) GDPR).

Telephone and WhatsApp

Data: your phone number and the content of the conversation, including any photos of the problem you send us.

Purpose: as above.

Legal basis: pre-contractual steps and performance of the contract (Art. 6(1)(b) GDPR).

Invoicing and tax obligations

Data: name or company name, tax number, billing address and amounts invoiced.

Purpose: to meet accounting, tax and invoicing obligations.

Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).

Website analytics

Data: pages visited, time spent, where the visit came from, device and browser type, IP address and cookie identifiers.

Purpose: to understand how the site is used, which content is useful, and improve it accordingly. We do not build individual profiles or make automated decisions about you.

Tools: we use Google Analytics 4 and Google Tag Manager, provided by Google Ireland Limited.

Legal basis: your consent, obtained through the cookie notice (Art. 6(1)(a) GDPR). These tools do not load until you give it. You can withdraw it at any time from the cookie settings panel, linked in the footer of this site.

How long we keep your data

• Enquiries that don’t lead to work: one year from last contact.
• Accepted quotations and completed work: for the duration of the relationship

and, afterwards, for as long as any liability could still be claimed.

• Records with tax implications: for the periods set by Spanish tax and

commercial law.

After those periods, the data is deleted.

Who we share your data with

We do not sell or share your data for marketing purposes. The only parties with access are:

• [HOSTING PROVIDER], a Spanish company, as a data processor, for website and

email hosting. Its servers are located within the European Union.

• Google Ireland Limited, as a data processor, for website analytics, and only if

you have accepted the relevant cookies.

• [ACCOUNTANT], for bookkeeping and tax filing.
• The Spanish tax authorities and other public bodies, where legally required.

International transfers

Analytics data may be processed by Google LLC in the United States. That transfer relies on the European Commission’s adequacy decision for the EU-US Data Privacy Framework, to which Google LLC is certified.

If you do not accept analytics cookies, this transfer does not take place.

All other processing described in this policy takes place entirely within the European Economic Area.

Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent you have given.

To do so, write to [EMAIL] stating which right you wish to exercise and enclosing a copy of proof of identity.

If you believe your data has not been handled properly, you may complain to the Spanish Data Protection Agency, the Agencia Española de Protección de Datos (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid).

Security

We apply reasonable technical and organisational measures to protect your data against loss, misuse and unauthorised access. This site uses an encrypted connection (HTTPS).

Photographs of completed work

When we photograph a job, it is to document what was done and attach the images to the work sheet or invoice.

We do not publish photographs of your property or use them for marketing without asking you first. If we ever ask permission to use an image on the website or on social media, you are free to say no — it makes no difference to the service you receive.

Children

This site is not aimed at children and we do not knowingly collect their data.

Changes to this policy

This policy may be updated. The version in force is always the one published on this page, with its last-updated date.

Last updated: [DATE]