At LEOSTROY REFORMA, S.L.U. (hereinafter, “Leostroy Construcciones”) we process the information provided to us by data subjects with the utmost respect for their privacy and in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).
1. Data controller
- Controller: LEOSTROY REFORMA, S.L.U.
- Tax ID (CIF): B57888919
- Address: C/ Licoreres, 2B, Centro Empresarial Mallorca, 07141 Polígono Industrial Marratxí (Balearic Islands)
- Email: info@leostroyconstrucciones.com
- Phone: 626 55 30 90
2. For what purposes do we process your personal data?
The personal data you provide through the website’s contact and quote request forms will be processed for the following purposes:
- To handle and manage your requests for information and quotes regarding our construction and renovation services.
- To contact you by phone, email or WhatsApp to respond to your inquiry.
- To manage the pre-contractual relationship and, where applicable, the contractual relationship arising from a construction or renovation commission.
- To analyze the origin of visits and advertising traffic (Google Ads and/or Meta Ads campaigns) using UTM parameters, in order to measure the effectiveness of our marketing campaigns.
- To compile website usage statistics for improvement and web analytics purposes.
No automated decisions will be made, nor will profiles be created that produce legal effects on the user.
3. What is the legal basis for processing your data?
The legal basis for processing your data is:
- The data subject’s consent, given by ticking the acceptance box when submitting any form on the website (Art. 6.1.a GDPR).
- The performance of pre-contractual measures requested by the data subject, when the request is for the preparation of a quote (Art. 6.1.b GDPR).
- The controller’s legitimate interest in the case of web analytics and the measurement of advertising campaigns (Art. 6.1.f GDPR), and the user may object at any time via the cookie settings panel.
4. How long will we keep your data?
Personal data will be kept for as long as the business or pre-contractual relationship is maintained and, once it has ended, for the applicable legal limitation periods (generally, up to 6 years for tax and accounting purposes under the Commercial Code, or the periods established at any given time by commercial, tax or data protection law). Once these periods have elapsed, the data will be deleted or anonymized.
5. Who will your data be shared with?
Your data will not be shared with third parties, except where legally required. However, for the proper provision of the service, certain providers access the data as data processors, including:
- Hostinger (web hosting provider).
- Web analytics and digital advertising tools, which may include Google Analytics, Google Ads and/or Meta Ads (Facebook/Instagram), depending on the marketing tools ultimately activated on the site, and always subject to the user’s acceptance via the cookie panel.
- Management software providers (CRM, email, WhatsApp Business) necessary to respond to the requests received.
[Internal note: this list must be reviewed and finalized before the website is published, depending on which analytics/advertising tools are ultimately activated, and the corresponding data processing agreement (Art. 28 GDPR) must be signed with each provider.]
6. International data transfers
Some of the providers mentioned (for example, Google or Meta) may be located outside the European Economic Area, or may transfer data to servers located in the United States or other third countries. In such cases, these transfers are carried out under the safeguards provided for in the GDPR, such as the Standard Contractual Clauses approved by the European Commission or applicable adequacy decisions.
7. What are your rights?
Any person has the right to obtain confirmation as to whether Leostroy Construcciones is processing personal data concerning them. Data subjects have the right to:
- Access their personal data.
- Rectify inaccurate or incomplete data.
- Request the erasure of their data when, among other reasons, it is no longer necessary for the purposes for which it was collected.
- Request the restriction of the processing of their data.
- Object to the processing of their data.
- Request the portability of their data.
- Withdraw consent given at any time, without affecting the lawfulness of processing carried out prior to its withdrawal.
You may exercise these rights by writing to info@leostroyconstrucciones.com or to the registered address indicated in section 1, attaching a copy of an identifying document.
Likewise, if you believe that the processing of your personal data violates the applicable regulations, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD) — www.aepd.es.
8. Cookies
This website may use its own and third-party cookies (analytics and advertising) to improve the browsing experience and measure the performance of marketing campaigns. Before installing any non-essential cookie, the user’s consent will be requested via the corresponding cookie settings panel (CMP), where they may accept, reject or configure its use at any time.
[Internal note: when using Google/Meta Ads campaigns, it is mandatory to implement a cookie consent banner in accordance with the AEPD’s Cookie Guide, and it is recommended to configure Google Consent Mode v2 so that Google Ads campaigns continue to function correctly under GDPR/ePrivacy. A separate, more detailed Cookie Policy can be developed once the final tools have been decided.]
9. Security measures
Leostroy Construcciones has adopted the technical and organizational measures necessary to guarantee the security and integrity of the personal data processed, as well as to prevent its alteration, loss, unauthorized processing or access, taking into account the state of the art, the nature of the data and the existing risks.
10. Changes to the privacy policy
Leostroy Construcciones reserves the right to modify this privacy policy in order to adapt it to legislative or case-law developments, or to changes in the interpretation of the Spanish Data Protection Agency. In such cases, the changes introduced will be announced on this page with reasonable notice before they take effect.
Last updated: [website publication date]