Privacy Policy

1. Data controller

• Identity: Iván Cruz Déniz
• Tax ID (NIF): 44707951E
• Address: Arrecife, Lanzarote, Islas Canarias
• Phone: +34 639 53 53 77
• Email: info@ivancruzdeniz.es

2. Purpose of processing

The personal data provided by users through the contact form, WhatsApp or email will be processed for the following purposes:

• Managing and responding to enquiries, availability requests and quotations.
• Maintaining commercial communications related to the services contracted or requested.
• Complying with applicable legal obligations.

No profiles will be created nor automated decisions taken based on the data provided.

3. Data collected

The personal data collected through this website are:

• Contact form: full name, email address and message.
• WhatsApp: phone number (if the user initiates the conversation).
• Anonymous web analytics: browsing data processed in an aggregated and anonymous manner through Umami Analytics, without individually identifying the user.

The user guarantees the truthfulness and accuracy of the data provided.

4. Legal basis for processing

The legal basis for data processing is the consent of the data subject (Article 6.1.a GDPR), given by voluntarily submitting the contact form or initiating communication via WhatsApp.

The legitimate interest of the controller (Article 6.1.f GDPR) supports the use of anonymous web analytics to improve the website’s performance.

5. Data retention

Personal data will be retained for the time necessary to respond to the enquiry or provide the requested service. Once the relationship has ended, they will be kept duly blocked during the statutory limitation periods to address potential liabilities.

6. Recipients and transfers

Personal data will not be disclosed to third parties, except where required by law. No international data transfers are carried out.

The website hosting service and email service may involve data passing through servers located within the European Union, always under appropriate safeguards.

7. Data subject rights

The user may exercise the following rights:

• Access: to know what personal data are being processed.
• Rectification: to correct inaccurate or incomplete data.
• Erasure: to request deletion of data when they are no longer necessary.
• Objection: to object to the processing of their data on legitimate grounds.
• Restriction: to request restriction of processing under certain circumstances.
• Portability: to receive the data in a structured format and transmit them to another controller.

To exercise these rights, the user must send a written request to info@ivancruzdeniz.es, indicating the right they wish to exercise and enclosing a copy of their identity document.

The user also has the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if they consider that the processing does not comply with the regulations.

8. Security measures

The controller has adopted the necessary technical and organisational measures to ensure the security of personal data and prevent its alteration, loss, processing or unauthorised access, in accordance with current legislation.