Privacy policy

Controller

Tetiana Virovka, IDEA21Design, NIF/NIE Y5134271H, Plaza Sant Antoni, 8, 08182 Sant Feliu de Codines, Barcelona, España. Email for privacy matters and exercising your rights: idea21design@ukr.net.

Data and purposes

When you send an enquiry we receive the data you provide: name, email, message, language and, where applicable, the service or capsule you are interested in. We use this information to answer the enquiry, prepare a proposal and carry out the pre-contractual steps you request. Fields marked as required are necessary to process it; without a valid contact we cannot reply.

The legal basis for requests related to a possible contract is taking pre-contractual steps at the request of the data subject. For other enquiries, the legitimate interest in answering communications addressed to the studio applies, balanced against the person's rights. Compliance with legal obligations is based on the corresponding obligation. We do not use a quote request as permission to send advertising.

Strictly necessary technical data, security logs and anti-abuse controls are used to maintain the site and protect the services, based on the legitimate interest in security. Optional analytics or marketing tools are only activated when they are configured and you have given consent. You can withdraw it from 'Cookie settings'.

Retention

Enquiries are kept for as long as necessary to handle them and for reasonable follow-up. When a request is closed without a contract, the need to keep it will be reviewed and it will be deleted or anonymised according to the retention period set by the controller. If there is a contractual relationship, the necessary documents will be kept during the relationship and for the applicable legal archiving and liability periods. Blocked data, where applicable, will be limited to dealing with legal liabilities. You can ask for information about the retention of your case or exercise your rights at the email address above.

Access, providers and transfers

Only authorised people who need the information for these purposes have access to it. Hosting, database, storage, email and maintenance providers may process data on behalf of the controller with the appropriate contractual safeguards. We do not sell contact data.

The studio may use an artificial intelligence assistant inside its administration area to organise or edit content. It is not an automated decision-making service about visitors. If an authorised person includes an enquiry in an assistant task, the necessary information may be processed by the provider configured for that task, among OpenAI, Anthropic or Google. Enquiries are not automatically added to every conversation. You can ask for information about the providers that apply to your case.

If a provider processes data outside the European Economic Area, the required safeguards will be checked, such as an applicable adequacy decision or standard contractual clauses and supplementary measures where necessary. You can ask for information about these safeguards at idea21design@ukr.net. Connections to external services, such as social networks, are also governed by those services' policies when you choose to visit them.

Rights

You can request access, rectification, erasure, objection, restriction and portability where applicable, and withdraw consent without affecting the lawfulness of earlier processing. Send your request to idea21design@ukr.net, stating the right and the information needed to identify the processing. Additional identity information will only be requested when necessary and proportionate.

You can also lodge a complaint with the Spanish Data Protection Agency (AEPD): aepd.es . No decisions based solely on automated processing that produce legal or similarly significant effects on visitors are made.

Security and updates

Access controls and technical and organisational measures appropriate to the processing are applied. Please do not send passwords, full bank details or especially sensitive information through the forms. This policy will be updated if the relevant purposes or tools change, stating its date.