Privacy policy

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), and Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), users of the website torrecreativa.es are hereby informed of the applicable data protection policy.

 

 

1. Data Controller

  • Owner: Carlos Delgado Berzal
  • Tax ID (NIF): 46843329B
  • Address: Nerja (Málaga), Spain
  • Contact email: info@torrecreativa.es
  • Website: https://torrecreativa.es

 

 

2. Data Collected

The following personal data may be collected through the website forms:

  • Full name
  • Email address
  • Contact phone number (if voluntarily provided by the user)
  • Message or enquiry submitted

Additionally, the website may automatically collect browsing data (IP address, browser type, pages visited and visit duration) through web analytics tools (see the section on data processors).

 

 

3. Purpose of Data Processing

Personal data provided through forms or by email is used exclusively to:

  • Respond to enquiries, information requests or quote requests.
  • Manage communications with the user in the context of a potential professional or contractual relationship.
  • Provide the services expressly requested.

 

 

4. Legal Basis for Processing

The legal basis for data processing is the user’s consent, voluntarily given by completing and submitting the website forms or by sending an email. Where processing is necessary for the performance of a contract or the application of pre-contractual measures, the legal basis shall likewise be said contract or pre-contractual relationship.

 

 

5. Data Retention

Personal data will be retained for the time strictly necessary to address the request made and, where applicable, for the duration of the professional or contractual relationship. Once this period has elapsed, the data will be blocked and subsequently deleted in accordance with the deadlines established by applicable regulations.

 

 

6. Recipients and Data Disclosure

Personal data will not be disclosed to third parties, except where required by law or when strictly necessary for the provision of the contracted service.

 

Data Processors

This website uses the following third-party services that may access browsing data in their capacity as data processors:

Provider

Service

Country

Safeguards

Google LLC

Google Analytics 4 (web analytics)

USA

EU Standard Contractual Clauses / Privacy Framework

Google LLC

Google Search Console (search engine performance)

USA

EU Standard Contractual Clauses / Privacy Framework

Google LLC

Google Tag Manager (tag management)

USA

EU Standard Contractual Clauses / Privacy Framework

Automattic Inc.

WordPress / Akismet (web platform)

USA

EU Standard Contractual Clauses

 

International data transfers to Google LLC are carried out under the EU-US Data Privacy Framework, approved by the European Commission in July 2023.

 

 

7. User Rights

The user may exercise, at any time and free of charge, the following rights recognised by the GDPR and the LOPDGDD:

  • Access: obtain confirmation as to whether their personal data is being processed.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: request the deletion of their data when it is no longer necessary.
  • Objection: object to the processing of their data in certain circumstances.
  • Restriction of processing: request the restriction of the processing of their data.
  • Portability: receive their data in a structured, commonly used format.
  • Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.

To exercise these rights, the user may send a written request to:

  • Email: info@torrecreativa.es
  • Subject line: Exercise of GDPR rights

The data controller will respond to the request within a maximum period of one month, which may be extended by two months in cases of particular complexity.

 

 

8. Supervisory Authority

If the user considers that the processing of their personal data infringes current regulations, they have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), the competent supervisory authority in Spain:

 

 

9. Data Security

The data controller has implemented the necessary technical and organisational measures to ensure the security and integrity of the personal data processed, as well as to prevent its loss, alteration or unauthorised access by third parties.

 

 

10. Changes to the Privacy Policy

The data controller reserves the right to amend this privacy policy to adapt it to legislative, case-law or business practice changes. In the event of substantial changes, the user will be informed through the website itself.

 

Last updated: March 2026