In plain words
We only ask for what we need to answer you and prepare your free preview: details about your business and how to reach you.
We never sell your details. Only the services that help us work handle them, such as our hosting, email and form providers, and WhatsApp if you write to us there.
You are in control. Ask us to see, correct or delete your details whenever you want by writing to contact@costadelsolwebsites.com.
No tracking. This website uses no analytics or advertising cookies.
1Who is responsible for your data
This policy explains how we handle your personal data under the General Data Protection Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD). The controller of your data is:
- Trading name
- Costa del Sol Websites
We have not appointed a data protection officer, as the law does not require one for an activity like ours. For anything about your data, write to us at the email above.
2What data we collect
When you ask for your free preview
Our form asks for:
- your business name and type of business;
- whether you already have a website, and which plan interests you;
- your name;
- how you would like us to contact you, and your WhatsApp or phone number, or your email;
- the best time to call you, if you choose a call;
- whether you are interested in monthly care;
- the features you chose and, if you like, a message.
When you write to us or call us
If you contact us by WhatsApp, phone or email, we receive your name, your number or email address and whatever you decide to tell us.
If you become a client
We also handle your billing details (name or company name, tax ID and address) and the material you send us for your website, such as texts, photos and your logo.
When you browse
This website uses no analytics or advertising tools. To show it to you, your browser connects to our hosting provider (Cloudflare) and to the services that supply our fonts (Google Fonts) and animations (jsDelivr), which receive your IP address. Google Maps loads only if you tap “Show the map”. Our cookie policy explains this in detail.
Please give us accurate details, and only share someone else’s details if they have agreed. We do not need sensitive data, such as information about your health, so please do not send it.
3Why we use it, and on what legal basis
| What for | Legal basis |
|---|---|
| Answer your request and contact you the way you chose. | Steps taken at your request before a contract (art. 6.1.b GDPR): you ask us to contact you when you send the form or write to us. |
| Prepare your free preview and your quote. | Steps taken at your request before a contract (art. 6.1.b GDPR). |
| Manage our relationship if you become a client: build, publish and look after your website, and invoice you. | Performance of our contract (art. 6.1.b GDPR) and our legal obligations, such as tax law (art. 6.1.c GDPR). |
| Show you this website and keep it secure. | Our legitimate interest in running a website that works well and is secure (art. 6.1.f GDPR). |
We do not make automated decisions about you or build profiles.
4How long we keep it
| Case | How long |
|---|---|
| Requests that do not become a project | As long as we need to handle your request, and then 6 months from our last contact. After that, we delete them. |
| Clients | While we work together, and afterwards for as long as tax and commercial law require (generally 4 years for tax purposes and 6 years for accounting records). |
If you ask us to delete your data, we will, unless we must keep it to meet a legal obligation. In that case we keep it blocked, available only to the authorities and the courts, for the time required (art. 32 LOPDGDD).
5Who else handles it
We never sell, rent or give away your personal data. Only these providers handle it, solely to provide their service to us and under contracts that oblige them to protect it (art. 28 GDPR):
- Website hosting and email: Cloudflare, Inc., which hosts this website and forwards messages sent to contact@costadelsolwebsites.com to the mailbox we reply from.
- Mailbox: the provider of that mailbox, which stores the messages we receive and send.
- Request form: Formspree, Inc., which receives what you send with the form and emails it to us.
- Fonts: Google Fonts (Google Ireland Ltd / Google LLC), which receives your IP address when the page loads.
- Animations: jsDelivr, which receives your IP address when the page loads.
- Map: Google Maps (Google Ireland Ltd / Google LLC), only if you tap “Show the map”.
If you write to us on WhatsApp, your messages go through WhatsApp Ireland Limited (Meta), which handles them under its own terms and privacy policy. And if the form can't be sent and you choose to send it from your own WhatsApp or email app, it travels through that service like any other message you send.
We will also share data with public authorities, such as the Spanish tax agency, when the law requires it.
6International transfers
Some of these providers, or companies in their groups, may store or access data outside the European Economic Area, for example in the United States. When that happens, the transfer is covered by the EU-US Data Privacy Framework, if the provider is certified under it, or by the standard contractual clauses approved by the European Commission (arts. 45 and 46 GDPR).
7Your rights
You can exercise these rights at any time, free of charge:
- Access: find out which of your data we hold.
- Rectification: correct data that is wrong or incomplete.
- Erasure: ask us to delete your data.
- Objection: ask us to stop using your data for a purpose.
- Restriction: ask us to put the use of your data on hold in certain cases.
- Portability: receive your data in a commonly used format, or have us send it to someone else.
To exercise them, email contact@costadelsolwebsites.com and tell us which right you want to exercise. If we have reasonable doubts about your identity, we may ask you for something to confirm it. We reply within one month, which can be extended by two more months if the request is complex (art. 12.3 GDPR).
If you are not happy
You can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at www.aepd.es or at C/ Jorge Juan 6, 28001 Madrid. We would appreciate the chance to sort it out with you first.
8Children
This website is not aimed at children under 14, and we do not knowingly collect their data. If you are under 14, please do not send us your details (art. 7 LOPDGDD).
9How we protect it
We apply technical and organisational measures suited to the risk (art. 32 GDPR): this website uses an encrypted connection, only the people who handle your request can see it, and we only work with providers that offer adequate guarantees.
10Changes to this policy
We may update this policy if the law or the way we work changes. The date at the top of the page shows the latest version. If a change significantly affects how we use our clients’ data, we will let them know.