Privacy policy

1. Data controller

The controller of your data is arace. For any privacy question you can write to us at hola@arace.es.

2. Data we collect

We process the data you give us voluntarily and some technical data:

• Contact form: name, email address and the content of your message.
• Quote tool: name, email or phone, company (optional), type of project, the description you write and the plan you choose.
• Technical data: IP address, browser and device, processed at a basic level for the operation and security of the website.
• Preferences: language, theme and your cookie choice, stored in your browser (see the cookie policy).

3. Purposes and legal basis

We use your data for the following purposes, on the legal basis indicated:

• Replying to your questions and requests: pre-contractual measures at your request and your consent (art. 6.1.b and 6.1.a GDPR).
• Preparing an estimate or a quote for you: pre-contractual measures (art. 6.1.b GDPR).
• Meeting accounting and tax obligations if we end up working together: legal obligation (art. 6.1.c GDPR).
• Keeping the website secure and working properly: legitimate interest (art. 6.1.f GDPR).
• Measuring and improving use of the website with analytics cookies, only if you accept them: consent (art. 6.1.a GDPR).

4. Retention

We keep the data from your enquiries for up to 12 months after the last communication, unless a legal obligation requires a longer period. If we end up working together, we keep it for the duration of the contract and the legal periods that follow. Afterwards we block or securely delete it.

5. Recipients and international transfers

We do not sell your data. We only share it with providers that supply us with technical services, such as hosting, email or management tools, who act as processors under contract, and with the authorities when the law requires it. If a provider is located outside the European Economic Area, we will make sure the safeguards required by the GDPR are in place.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to hola@arace.es and stating which right you are exercising. We may ask you to prove your identity.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration.

8. Minors

Our services are not aimed at children under 14. If we find that we have collected data from a minor without the authorisation of their legal representatives, we will delete it.

9. Changes to this policy

We may update this policy because of legal or service changes. The version in force is the one published on this page, with its last-updated date.