Privacy Policy

1. Data controller

Javier Gareta (Garetia), self-employed sole trader based in Madrid, Spain, is the controller responsible for the personal data collected through this website.
Contact email: info.garetia@gmail.com

2. What data we process and why

Through the contact form and the direct WhatsApp link on this website, we collect: name, email address, phone number, and the message the user chooses to write. This data is processed to:

Respond to enquiries and requests for quotes or a free diagnostic sent by the user.
Manage the business relationship and, where applicable, the provision of contracted services.

No special category data (health, ideology, etc.) is collected, and data is not used to build automated profiles.

3. Legal basis

The legal basis for processing is the consent of the data subject, given when submitting the contact form or starting a WhatsApp conversation, and the performance of pre-contractual steps requested by the user (preparing quotes).

4. Who we share your data with

Contact form data is processed through the following third-party tools, acting as data processors:

Make, the automation platform that receives the form submission.
Google LLC (Google Sheets and Gmail), for lead logging and automatic reply emails. Google may host data outside the European Economic Area; in that case, the transfer is covered by the European Commission's Standard Contractual Clauses and/or the EU-US Data Privacy Framework.
Netlify, Inc., the website's hosting provider.

Data is not shared with third parties for commercial or advertising purposes unrelated to Garetia.

5. Retention period

Data is retained for as long as there is a mutual interest in maintaining the purpose of processing and, once the relationship ends, for the legally required periods to address any liability arising from the processing.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing, and data portability by writing to info.garetia@gmail.com, stating the right you wish to exercise and attaching proof of identity.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) — www.aepd.es — if you believe the processing of your data does not comply with applicable law.

7. Security measures