Privacy Policy

1. Data Controller

2. Personal Data We Collect

We collect the personal data you voluntarily provide when using our website or contacting us. Specifically:

2.1 Through the contact form

• Full name
• Email address
• Phone number (if provided)
• Your message or enquiry

2.2 Website browsing

• IP address and technical device data
• Pages visited, time spent and traffic source
• Information collected via cookies (see section 7)

3. Purpose and Legal Basis for Processing

4. Data Retention Period

We retain your personal data for as long as strictly necessary to fulfil the purposes for which it was collected:

• Enquiries and contact forms: up to 1 year from your last communication.
• Customer data under a signed contract: for the duration of the contract and, thereafter, for the legally required periods under tax and commercial regulations (generally 5–6 years).
• Commercial communications: until you withdraw your consent.
• Browsing data / analytical cookies: in accordance with the applicable cookie policy (maximum 2 years).

5. Recipients and International Transfers

ACS Reformas Tarragona does not sell or transfer your personal data to third parties for commercial purposes. However, we may share it with:

• Technology service providers (web hosting, CRM, email platforms) acting as data processors under confidentiality agreements.
• Public authorities where a legal obligation requires it.
• Subcontractors involved in carrying out the work, only with the data strictly necessary for that purpose.

At present, we do not transfer personal data outside the European Economic Area. Should any technology provider involve such a transfer, we ensure adequate safeguards are in place in accordance with the GDPR (standard contractual clauses or an equivalent mechanism).

6. Your Rights

As the data subject you have the right to:

• Access: find out what data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure (“right to be forgotten”): request deletion of your data when it is no longer necessary.
• Restriction of processing: ask us to limit the use of your data in certain circumstances.
• Data portability: receive your data in a structured, commonly used format.
• Objection: object to processing based on legitimate interest or for direct marketing purposes.
• Withdrawal of consent: at any time, without retroactive effect.

7. Cookies

Our website uses first-party and third-party cookies to enhance your browsing experience, perform statistical analysis and, where applicable, offer you personalised content. You can find detailed information and manage your preferences in our Cookie Policy.

Cookies that are strictly necessary for the website to function do not require your consent. For all other cookies, we request your authorisation via the cookie banner displayed the first time you visit the site.

8. Minors

Our services are not directed at children under the age of 14. We do not knowingly collect personal data from minors. If we detect that we have obtained data from a minor without the consent of their legal guardians, we will delete it immediately. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

9. Security Measures

We implement the technical and organisational measures necessary to protect your personal data against unauthorised access, loss, destruction or alteration. These include: HTTPS encryption of the website, restricted access to data, regular backups and confidentiality agreements with data processors.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in legislation or new website features. When we do so, we will revise the “last updated” date at the top of this document. We recommend that you check it periodically. If the changes are significant, we will notify you prominently on the website or, if we hold your email address, directly by email.