Privacy policy

1. Data controller

Rafael Nache Navarro (SUPA), tax ID 77655315R, registered at Avenida Federico García Lorca 105, Almería, email serviciossupa@gmail.com.

2. What data we process and why

Quote form: name, email and/or phone, town, property type, service, message and language. Purpose: to answer your request and prepare the quote.

Virtual assistant: messages are processed so that it can reply. Your contact details and a summary of the project are only sent to the team if you choose to share them.

WhatsApp, phone or email: if you contact us, we process the data you provide in order to assist you.

3. Legal basis

Your consent (Art. 6(1)(a) GDPR) and pre-contractual steps taken at your request (Art. 6(1)(b) GDPR). You can withdraw your consent at any time.

4. Retention

For as long as the business relationship lasts. If it is not formalised, up to 12 months after the last contact; afterwards the data is deleted unless the law requires us to keep it.

5. Recipients and providers

We do not share your data with third parties unless legally required. We use providers that process data on our behalf: hosting and content delivery network (Cloudflare), email delivery (Resend) and the artificial intelligence service for the assistant (Cloudflare Workers AI). If any of them processes data outside the European Economic Area, the safeguards required by the GDPR apply.

6. AI assistant and automated decisions

The assistant internally rates the urgency of a request (high or medium) to prioritise our reply. It does not take decisions with legal effects on you.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to serviciossupa@gmail.com. If you believe we are not handling your data properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or your local authority.

8. Minors

This website is not aimed at children under 14.

9. Security

We apply reasonable technical and organisational measures to protect your data, including encrypted transmission (HTTPS).