Privacy Policy

1. Identity of the Data Controller

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), we inform you that the personal data collected through this website are processed by:

• Data Controller: Obras & Instalaciones Fontcal S.L. (Fontanería Fontcal)
• Tax ID (CIF): B39741905
• Address: Paseo de la Estación, 26, bajo — 39710 Solares, Medio Cudeyo, Cantabria, Spain
• Phone: 942 523 028
• Data Protection Email: info@fontaneriafontcal.com

2. Categories of Personal Data Processed

Depending on your interaction with our website, we process strictly necessary data based on the principle of data minimization:

• Identification and contact data: full name, email address, phone number and town/province provided in contact or quote request forms.
• Technical query or project details: information regarding the type of installation or service required (plumbing, DHW, heating, biomass, solar thermal, aerothermal or roof and facade maintenance) voluntarily included in your message.
• Browsing and technical data: IP address, browser type and analytical or preference data collected through cookies, subject to your consent as detailed in our Cookie Policy.

3. Purposes of Processing

At Obras & Instalaciones Fontcal S.L. we process the personal data provided for the following specific purposes:

No automated individual decisions or user profiling producing legal effects are carried out.

• Handling queries and quote requests: responding to requests for information, technical assessment, on-site visits and drafting custom quotes sent via our forms, phone or email.
• Execution of works, installations and maintenance: managing the contractual, administrative, accounting and invoicing relationship when contracting our services.
• Technical security and website analytics: ensuring the security of the web infrastructure and, only if you grant express consent, analyzing website usage in aggregate form.

4. Legal Basis for Processing (Art. 6 GDPR)

The processing of your personal data is based on the following legal grounds:

• Express consent of the data subject (Art. 6.1.a GDPR): granted by ticking the privacy policy acceptance box before submitting any contact form and by accepting non-essential cookies in the preference panel.
• Implementation of pre-contractual measures or performance of a contract (Art. 6.1.b GDPR): necessary to prepare technical quotes requested by the User and execute contracted installation or maintenance works.
• Compliance with legal obligations (Art. 6.1.c GDPR): compliance with tax, commercial, accounting and building/industrial safety regulations applicable to the company.
• Legitimate interest of the Controller (Art. 6.1.f GDPR): ensuring logical security of the website, preventing fraud and responding to strictly professional communications.

5. Recipients and Data Processors (Art. 28 GDPR)

Your personal data will not be sold, rented or transferred to third parties for commercial purposes. Data will only be disclosed to third parties when there is a legal obligation (Tax Agency, Courts and Tribunals, or competent Public Administrations).

For the provision of auxiliary technical services (web hosting, corporate email, IT maintenance or tax/accounting advisory), Obras & Instalaciones Fontcal S.L. relies on suppliers acting as Data Processors under contracts signed in accordance with Article 28 of the GDPR, guaranteeing appropriate security and confidentiality.

6. Data Retention Periods and Statutory Blocking

Once the applicable periods expire, data will be blocked in accordance with Article 32 of the LOPDGDD—remaining available solely to Judges, Courts, the Public Prosecutor or competent Public Administrations—and permanently deleted once statutory limitation periods expire.

• Queries and unaccepted quotes: kept for the time strictly necessary to address your request and for a maximum period of 12 months for commercial or technical follow-up, unless deletion is requested earlier.
• Customer and invoicing data: kept throughout the contractual relationship and, once ended, duly blocked during statutory limitation periods (minimum 4 to 6 years under Spanish Tax Law and the Commercial Code).
• Cookie data: kept according to the duration specified for each cookie in our Cookie Policy.

7. Rights of Data Subjects and Digital Testament

Any person has the right to obtain confirmation as to whether Obras & Instalaciones Fontcal S.L. is processing personal data concerning them. You may exercise the following rights free of charge:

To exercise your rights, you may send a written request to Obras & Instalaciones Fontcal S.L. at Paseo de la Estación, 26 bajo, 39710 Solares, Medio Cudeyo, Cantabria, or by email to info@fontaneriafontcal.com, indicating the right you wish to exercise. A photocopy of your national ID card (DNI/NIE) will not be systematically required; additional proof of identity will only be requested if there are reasonable doubts about the identity of the applicant (Art. 12.6 GDPR).

The maximum legal response period is one (1) month from receipt of the request (extendable by two further months in particularly complex cases). If you consider that your rights have not been properly addressed, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) via https://www.aepd.es.

• Right of Access: to know what personal data we process and the characteristics of such processing.
• Right to Rectification: to request correction of inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): to request deletion of your data when, among other reasons, they are no longer necessary for the purposes for which they were collected.
• Right to Restriction of Processing: to request suspension of data processing in the cases provided by law.
• Right to Data Portability: to receive your data in a structured, commonly used and machine-readable format to transmit them to another controller.
• Right to Object and Withdraw Consent: to object to processing or withdraw granted consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
• Digital Testament (Art. 3 Organic Law 3/2018): persons linked to a deceased person for family or de facto reasons, as well as their heirs, may contact the controller to request access to, rectification or deletion of the deceased’s personal data, unless expressly prohibited by the deceased.

8. Security Measures and Policy Updates

Obras & Instalaciones Fontcal S.L. has implemented appropriate technical and organizational measures (encrypted HTTPS/TLS communications, access control, CSRF protection and backups) to ensure a level of security appropriate to the risk in accordance with Article 32 of the GDPR.

This Privacy Policy may be updated to adapt to legislative changes or criteria of the AEPD. You can also consult our Legal Notice and our Cookie Policy.

---