Data controller
| Identity | Jorge Andreu |
|---|---|
| Tax ID (NIF) | 46216292T |
| Postal address | [Address pending] |
| info@jorgeandreu.com |
Data we process
We only process personal data you voluntarily provide via the contact form on this website:
- Name — to address you personally.
- Email address — to reply to your enquiry.
- Subject and message — the content of your enquiry or quote request.
We do not collect special category data (health, political opinions, racial origin, etc.) or data from children under 14. If you are under 14, please do not use the contact form.
Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Responding to enquiries received via the contact form | Legitimate interest of the controller (Art. 6(1)(f) GDPR) |
| Preparing and sending quotes or commercial proposals | Pre-contractual measures at the data subject's request (Art. 6(1)(b) GDPR) |
Retention period
Data will be retained for as long as necessary to handle your enquiry and, where applicable, for the duration of any resulting contractual relationship. Once that relationship ends, data will be blocked and retained for the applicable statutory limitation periods (generally 5 years under the Spanish Civil Code), after which it will be deleted.
Recipients
We do not share your data with third parties except as required by law. We use the following service providers acting as data processors:
| Provider | Service | Location | Safeguards |
|---|---|---|---|
| Resend Inc. | Email delivery | USA | EU Standard Contractual Clauses (SCCs) |
| Cloudflare Inc. | Anti-spam protection (Turnstile) and web infrastructure | USA | EU Standard Contractual Clauses (SCCs) |
Your rights
You may exercise the following rights at any time by sending a written request to info@jorgeandreu.com along with a copy of an identity document:
- Access — to know what data we hold about you.
- Rectification — to correct inaccurate data.
- Erasure — to request deletion when data is no longer needed, among other grounds.
- Objection — to object to processing based on legitimate interest.
- Restriction — to request that we limit use of your data in certain circumstances.
- Portability — to receive your data in a structured, machine-readable format.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe the processing does not comply with applicable law: www.aepd.es.