We are committed to guaranteeing the user's privacy at all times and to not collecting unnecessary information. Below we provide all the necessary information about our Privacy Policy in relation to the personal data we collect, explaining:
- Who is the controller of your data.
- For what purposes we collect the data we request from you.
- What the legal basis for its processing is.
- For how long we keep it.
- To which recipients your data is disclosed.
- What your rights are.
1. Controller
DEGUSTO ARTE CONSULTING SL (trading name: Degusto Arte by Xavi Iglesias)
Tax ID (NIF) B66783796
Carretera Gualba-Batlloria s/n (Camping Aqua-Alba), Parcela M10, 08474 Gualba, Barcelona, Spain
Telephone: +34 636 510 874
hola@degustoarte.com
2. Purposes, legal basis and retention of the processing of data submitted through:
Quote request and enquiry form
Purpose: To handle your quote requests and enquiries, send you our service proposal and follow up on it.
Legal basis: The user's consent when submitting a request through our form, and the implementation, at the user's request, of pre-contractual measures necessary to prepare the requested proposal.
Retention: For the duration of the commercial relationship arising from your request and, once it has ended, for the legally applicable limitation periods.
Sending of commercial information
Purpose: To send you commercial information about our services and news, only if you tick the corresponding acceptance box on the form (unticked by default).
Legal basis: The user's express consent given by ticking the acceptance box (opt-in). You may withdraw this consent at any time without affecting the handling of your request.
Retention: Until you unsubscribe from these communications or withdraw your consent.
Obligation to provide us with your personal data and consequences of not doing so
The provision of personal data requires a minimum age of 14 years or, where applicable, sufficient legal capacity to enter into a contract.
The personal data requested is necessary to handle your requests and/or provide the services you may contract; therefore, if you do not provide it, we will not be able to assist you properly or provide the service you have requested.
3. Recipients of your data
Your data is confidential and will not be disclosed to third parties, unless there is a legal obligation to do so.
For the operation of this website and the handling of requests, we use technology providers acting as data processors on behalf of DEGUSTO ARTE:
- Vercel Inc. — website hosting.
- Supabase — database where form submissions are stored (EU region, eu-west-1).
- Resend — sending of transactional e-mails (request confirmation and internal notification).
- Cloudflare — Turnstile anti-bot service protecting the form against automated submissions.
All of these providers have data processing agreements (DPAs) in place in accordance with Article 28 of the GDPR. In the case of Vercel and Resend, the provision of the service may involve international data transfers, safeguarded by the standard contractual clauses approved by the European Commission.
4. Rights in relation to your personal data
Any person may withdraw their consent at any time, where such consent was given for the processing of their data. In no case shall the withdrawal of this consent affect relationships established beforehand.
You may also exercise the following rights:
- Request access to your personal data or its rectification where it is inaccurate.
- Request its erasure where, among other reasons, the data is no longer necessary for the purposes for which it was collected.
- Request the restriction of its processing in certain circumstances.
- Object to the processing of your data on grounds relating to your particular situation.
- Request data portability in the cases provided for by the regulations.
- Other rights recognised under the applicable regulations.
Where and how to exercise your rights: by writing to the controller at its postal or e-mail address (indicated in section 1), citing the reference "Personal Data" and specifying the right you wish to exercise and in respect of which personal data.
In the event of any dispute with the company regarding the processing of your data, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
5. Security of your personal data
In order to safeguard the security of your personal data, we inform you that we have adopted all the technical and organisational measures necessary to guarantee the security of the personal data provided against its alteration, loss and unauthorised processing or access.
6. Keeping your data up to date
So that we can keep your personal data up to date, it is important that you inform us whenever there has been any change to it; otherwise, we cannot answer for its accuracy.
We are not responsible for the privacy policies applicable to personal data you may provide to third parties via the links available on our website.
This Privacy Policy may be amended to adapt it to changes made to our website, as well as to legislative or case-law developments on personal data, and we therefore recommend that you read it each time you provide us with your data through this website.