Skip to content
Home finished by Solteana in Málaga
Legal

Privacy policy.

What we do with your data when you write to us, how long we keep it, and how you can ask us to delete it.

What we do with your data when you write to us, how long we keep it, and how you can ask us to delete it.

The short version

If you write to us on WhatsApp, by phone or by email, we keep what you tell us so we can reply and prepare your quote. We don't sell it to anyone and we won't flood your inbox. You can ask us to delete it whenever you like by writing to andriy@solteana.com.

Below is the same thing with the detail the law requires.

Who is responsible for your data

Data controller
SOLTEANA CONSTRUCTORA SL (limited company)
Tax ID
B44905917
Registered address
C/ DOLORES IBARRURY 1 Bl.2 C (TORREMOLINOS)
Email for data matters
andriy@solteana.com
Phone
+34 635 04 00 33

This means we're the ones who decide what happens with your data, and the ones you should contact if you want to view, change or delete it.

Who runs the website

The website is built and maintained by an external agency. It acts as a data processor: it can access what comes in through the website only so the website works, following our instructions and under a duty of confidentiality. It cannot use that data for anything of its own. Once the contract governing that relationship is signed, we'll publish its name and details here.

What happens when you fill in a form

This is worth reading, because it doesn't work like on most websites. The forms on this website don't send us anything on their own. When you press the button, the website takes what you've written, puts together a message with it, and opens WhatsApp for you with that text already in place. You're the one who sends it, from your own WhatsApp.

That means two things. First, if you close the window without sending, nothing reaches us and we don't keep any copy. Second, your message travels through WhatsApp, which belongs to Meta and has its own privacy policy, the one you already accepted when you installed it. We receive it on the company's phone.

The website also doesn't store what you type in any database, and it doesn't send us an email with it either. There's no other path than that one.

What data we end up with

  • If you ask for a quote: your name, your phone number, the type of project, the town, the approximate size, when you'd like it done, and whatever you tell us in the message.
  • If you write to us with a question: your name, your phone number and your question.
  • If you leave us your opinion about a job: the rating, whatever you tell us and, if you'd like us to call you, your phone number or email.
  • If you write to us on WhatsApp, by phone or by email: whatever you tell us and the number or address you use to do it.
  • If you send us photos of the project through the chat: those photos. The website doesn't upload them, we ask for them in the WhatsApp conversation.

What we ask for is what we need in order to reply to you. Without a name and a phone number we can't get in touch with you.

One favour: in your message and photos, just tell us about the project. There's no need to tell us anything about your health, your family situation or your beliefs, or to send photos with identifiable people in them. If something like that reaches us by mistake, we delete it and don't use it.

What we use it for and on what legal basis

Answering you and preparing your quote
Because you asked us to: these are steps taken prior to a possible contract (GDPR art. 6.1.b).
Visiting the project, measuring it and following up if you hire us
The construction contract we sign (GDPR art. 6.1.b).
Keeping your feedback on a finished job and replying if something didn't go well
Our legitimate interest in knowing how we're doing and being able to fix it (GDPR art. 6.1.f).
Complying with legal obligations: invoicing, taxes and project warranties
Legal obligation (GDPR art. 6.1.c).
Counting visits to the website with Google Analytics
Your consent, only if you click “Accept” in the cookie notice (GDPR art. 6.1.a). You can withdraw it at any time from “Cookies” at the bottom of the website.

We don't send you advertising. If we ever wanted to, we'd ask you first and you could say no without that changing anything else above.

How long we keep it

  • If you ask for a quote and we end up not doing the project: we keep it for as long as needed to deal with your enquiry and any possible claims, and then we delete it.
  • If we end up doing the project: for as long as it lasts, and afterwards for as long as the law requires us to keep invoicing, warranty and potential claims documentation.
  • WhatsApp conversations: for as long as they're still needed for the above. You can ask us to delete yours.
  • Google Analytics visit data (only if you accept cookies): Google keeps it for 14 months and then deletes it.

Who else sees your data

We don't sell or share your data with anyone so they can advertise to you. The following see it, only so we can attend to you:

  • WhatsApp, Meta's messaging service, because that's how your message reaches us. That conversation is governed by WhatsApp's own privacy policy, which we don't control.
  • Vercel Inc., the company that hosts this website. It keeps technical visit logs, such as IP address, browser and page requested. It's based in the United States, explained further in the next section.
  • Google, because our company email runs on Google Workspace: if you send us an email, it arrives and is stored there.
  • Google, also through Google Analytics, which counts visits to the website, but only if you accept in the cookie notice (see the cookies section, further down).
  • Our accountants and our professional service providers, when needed for invoicing or to comply with the law.
  • Public authorities, when required by law: the Tax Agency, Social Security or the courts.

With all of them we have, or require, a data processing agreement.

If your data leaves Europe

The website's technical logs reach the United States, because our host, Vercel Inc., is a US company. That transfer is covered because Vercel is certified under the EU–US Data Privacy Framework, under which the European Commission declared in July 2023 that country offers an adequate level of protection. Should that framework ever cease to apply, the transfer would fall back on the standard contractual clauses approved by the Commission, already part of our contract with them.

If you accept Google Analytics, the data from your visit may be processed in the United States, where Google is headquartered. Google is signed up to the same EU-US Data Privacy Framework. If you don't accept, nothing reaches Google.

Messages you send us on WhatsApp are handled by Meta under its own terms, including its own rules on where they're processed. You can check them in the app.

Your rights

You can ask us at any time to:

  • See what data of yours we hold.
  • Correct it if it's wrong.
  • Delete it.
  • Restrict its use while something is being clarified.
  • Have it transferred elsewhere in a file.
  • Object to us using it when we do so on the basis of legitimate interest.

This is requested by writing to andriy@solteana.com, telling us what you'd like and attaching something that proves it's you. We'll reply within a month at the most.

If you believe we haven't handled it properly, you can file a complaint with the Spanish Data Protection Agency (AEPD), at Calle Jorge Juan 6 in Madrid or at www.aepd.es. We'd appreciate you telling us first, but it's your right and you don't have to go through us first.

Minors

This website is intended for adults. If you're under 14, please don't send us your data.

Security

The website runs on HTTPS and access to the data is limited to those who need to see it. We can't promise nothing will ever go wrong, but if something happened that genuinely affected you, we'd tell you and report it to the Agency, as the law requires.

Cookies

Cookies are small files a website stores in your browser. This website only uses the ones from Google Analytics, which tell us how many people visit and which pages get looked at. And only if you agree: until you click “Accept” in the notice, no cookie is stored and nothing is sent to Google. If you click “Reject”, nothing is loaded.

_ga
From Google Analytics. Tells one visitor apart from another to count visits. Lasts 2 years. Only if you accept.
_ga_*
From Google Analytics. Keeps the state of the current visit. Lasts 2 years. Only if you accept.

We don't use Google Analytics for advertising or to find out your name, and we don't combine its data with anything else. We have no advertising, no social media buttons, and no embedded maps or videos from third parties. Our fonts are served from our own server, not loaded from Google.

To remember whether you accepted or rejected, the website saves your answer in your own browser. It isn't a cookie and it doesn't leave your device. We ask you again after 24 months.

You can change your mind at any time with the “Cookies” button at the bottom of the website: the notice comes back. If you reject after having accepted, we delete the Google Analytics cookies. You can also delete them yourself in your browser settings.

Changes

If we change anything in this policy, we'll publish it here with the date.

Last updated: 6 October 2026.