Privacy policy

Last updated: 3 November 2026.

1. Controller and contact

This policy explains how personal data provided when requesting information or services from Proyectos y Certificados is used. Privacy enquiries can be sent to the email address above.

2. Data and contact channels

Data processed includes identification and contact details, the municipality, the description of the assignment and any documents you choose to email. Provide only necessary information and avoid sending particularly sensitive data or irrelevant third-party details.

The form prepares a message in your email application. It does not submit the fields to the website’s server or store them in a website database. The data is received when you send the email; your email provider’s terms also apply.

You can contact the practice directly by email. Information needed for a response must be accurate; if essential details or a reply address are missing, the enquiry may not be answerable. Contacting the practice does not automatically subscribe you to marketing.

3. Purposes and lawful bases

Quotes and services: assessing requirements, preparing proposals and managing assignments. Where the enquirer is a party to a prospective or existing contract, the basis is taking requested pre-contractual steps or performing the contract (GDPR Article 6(1)(b)).

General enquiries and professional contacts acting for businesses: responding and maintaining communications relating to the enquiry, on the legitimate interest of handling communications and professional relationships (GDPR Article 6(1)(f)), subject to the right to object.

Legal duties and claims: retaining required documentation and addressing liabilities, based on applicable legal obligations (GDPR Article 6(1)(c)) or the legitimate interest in exercising or defending rights (Article 6(1)(f)). Enquiries are not used for automated decisions or advertising profiles.

4. Retention

Enquiries that do not lead to an engagement are kept as needed to respond and follow up, for no more than 12 months after the last communication unless handling continues at the individual’s request or there is a legal reason for retention.

Assignment records are retained during the professional relationship and afterwards for the periods required by applicable legal obligations and liabilities. Where required, records will be blocked for those purposes and not used for other purposes.

5. Providers, disclosures and transfers

Professional email is managed through the service contracted with IONOS. Email, hosting and support providers may process the data needed to deliver their services. Contact details are not sold or disclosed to third parties for their marketing.

An assignment may require disclosures to authorities, inspection bodies or other professionals in line with the requested service and its lawful basis. If a provider processes data outside the European Economic Area, the relevant GDPR safeguards must apply; a static website does not by itself mean that no transfers occur.

Hosting and email: IONOS, through services contracted by the owner. Hosting processes technical access data for service security and stability. The data, anonymisation, retention periods and log conditions depend on the product contracted. The website’s own code does not include analytics or advertising tracking tools.

6. Your rights

You may request access, rectification, erasure, restriction, objection and portability where applicable by emailing estudio@proyectosycertificados.com and specifying the right you wish to exercise. Additional identity information will be requested only when necessary.

Where processing is based on consent, you may withdraw it without affecting earlier lawful processing. You may also lodge a complaint with the Spanish Data Protection Agency if you believe your rights have not been respected.

Spanish Data Protection Agency (AEPD)

7. Cookies and similar technologies

This site’s code does not set cookies, use local storage for tracking, or include analytics tags, advertising pixels or embedded third-party content. Language is selected using links, without storing a preference cookie.

Hosting may generate access logs or use technical mechanisms needed for security and availability. Information about these services depends on the provider and the hosting configuration actually in use.

8. Analytics and advertising

No analytics or advertising tracking tools are currently included in the website’s code. If they are added in the future, this information will be updated before activation and prior consent will be requested through accept and reject controls where required.