Privacy Policy

1. Data controller

• Identity: Iván Cruz Déniz
• Tax ID (NIF): 44707951E
• Address: Arrecife, Lanzarote, Canary Islands
• Phone: +34 639 53 53 77
• Email: info@ivancruzdeniz.es

2. Purpose of processing

Personal data provided by users via the contact form, WhatsApp or email will be processed for the following purposes:

• Managing and responding to enquiries, availability requests and quotes.
• Maintaining commercial communications related to contracted or requested services.
• Complying with applicable legal obligations.

No profiling will be carried out and no automated decisions will be taken based on the data provided.

3. Data collected

The personal data collected through this website are:

• Contact form: full name, email address and message.
• WhatsApp: phone number (if the user starts the conversation).
• Analytics: browsing data processed, only with consent, by Google Analytics 4 (Google LLC) and Microsoft Clarity (Microsoft Corporation). These providers may process online identifiers, device information and interactions with the site for statistics.

Users guarantee the truthfulness and accuracy of the data provided.

4. Lawfulness of processing

The legal basis for processing data is the data subject’s consent (Article 6(1)(a) GDPR), given by voluntarily submitting the contact form or starting a conversation via WhatsApp.

Google Analytics 4 and Microsoft Clarity are only activated when the user accepts the optional analytics category. They are used to analyse site usage.

5. Data retention

Personal data will be kept for as long as necessary to handle the enquiry or provide the requested service. Once the relationship has ended, data will be duly blocked for the applicable statutory limitation periods in order to address possible liabilities.

6. Recipients and transfers

The analytics providers listed above receive the data needed to provide their services. Their use may involve international data transfers to Google LLC or Microsoft Corporation, subject to the safeguards and transfer mechanisms each provider declares applying.

Website hosting and email services may involve data passing through servers located in the European Union, always under appropriate safeguards.

7. Rights of the data subject

Users may exercise the following rights:

• Access: to know which personal data are being processed.
• Rectification: to correct inaccurate or incomplete data.
• Erasure: to request deletion of data when no longer necessary.
• Objection: to object to the processing of their data on legitimate grounds.
• Restriction: to request restriction of processing in certain circumstances.
• Portability: to receive the data in a structured format and transmit them to another controller.

To exercise these rights, users must send a written request to info@ivancruzdeniz.es, indicating the right they wish to exercise and enclosing a copy of their identity document.

Users also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if they consider that the processing does not comply with the regulations.

8. Security measures

The controller has adopted the technical and organisational measures necessary to guarantee the security of personal data and to prevent their alteration, loss, processing or unauthorised access, in accordance with current legislation.