Data controller
- Controller: Iván Moreno Romero
- Tax ID (NIF): 11843090E
- Address: C/ Madrid 76, 6.º D, 18193 Monachil (Granada), Spain
- Email: info@lacasaestudio.com
What data we process and why
This site has no forms and does not register visitors. We only process the data you give us when you choose to contact us:
- Enquiries by email, phone, WhatsApp or Instagram direct message: your name, contact details and whatever you tell us in your message, to answer your enquiry and, where relevant, prepare a quote or a booking.
- Editor access to the management panel: if you are authorised to edit the site, the email address and name of the Google account you sign in with, only to control who can get in.
Legal basis
- Enquiries: your consent when you write to us and, if the enquiry leads to a booking, pre-contractual steps and the performance of the contract (art. 6.1.a and 6.1.b GDPR).
- Editors: our legitimate interest in protecting access to the panel (art. 6.1.f GDPR).
How long we keep it
Enquiry data is kept for as long as the conversation lasts and, if you book, for the periods required by law (for example, tax rules). Editor data is kept while the editor has access to the panel.
Who we share it with
We do not share data with third parties unless legally required. To run the site we use these providers, which process data on our behalf:
- Vercel Inc. (web hosting, United States). Transfers rely on the EU-US Data Privacy Framework and standard contractual clauses.
- Our own server running Supabase (the site’s database and files), located in Falkenstein (Germany), within the European Union.
- Google (editor sign-in), with the same safeguards as Vercel for international transfers.
If you write to us on WhatsApp or Instagram, those services also process your data under their own privacy policies.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to info@lacasaestudio.com. If you feel we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).