privacy policy

This policy explains what personal data is collected through the website, what it is used for and what rights you have over it, in accordance with Regulation 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation) and with Ley Orgánica 3/2018, de protección de datos personales y garantía de los derechos digitales (the Spanish Personal Data Protection and Digital Rights Act).

1. data controller

controller

Josep Garcia Trilles (barrac)

address

Valencia, Spain

email

info@barracarchitecture.com

2. what data is collected

• Contact form: name, email address, phone number (optional) and the message you write.
• Email: the data you include if you write directly to info@barracarchitecture.com.
• Technical browsing data: the server that hosts the website automatically records data such as the IP address, the browser and the time of the visit, solely for security and operational purposes.

The website does not use analytics or advertising tools, does not create profiles and does not make automated decisions about you. Please do not include in your messages any particularly sensitive data (about your health, for example) that is not necessary for your enquiry.

3. what it is used for

• To reply to your enquiry and continue any conversation you start.
• To prepare, if you ask for it, a fee proposal or a project proposal.
• To ensure the security and proper functioning of the website.

No commercial communications or newsletters will be sent without your express consent.

4. legal basis

• Your consent, when you submit the form or write to the studio (article 6.1.a of the Regulation). You can withdraw it at any time, without affecting any processing carried out before.
• Taking steps prior to entering into a contract at your request, when your enquiry relates to a possible commission (article 6.1.b).
• Legitimate interest in keeping the website secure, for technical browsing data (article 6.1.f).

5. how long it is kept

Data from enquiries is kept for as long as necessary to deal with them and, if they do not lead to a commission, is deleted no later than twelve months after the last contact. If a professional relationship begins, the data is kept for as long as it lasts and, afterwards, for the periods required by law (tax, commercial and professional liability obligations). The server's technical logs are deleted within short periods, in accordance with the hosting provider's policy.

6. recipients

Your data is not disclosed to third parties, except where required by law. To provide the service, the studio relies on providers that process data on its behalf and under contract, as data processors:

• Cloudflare, Inc., which hosts the website and protects it against attacks.
• Formspree, Inc., which receives the messages sent through the contact form and forwards them to the studio's email.
• The studio's email service provider.

Some of these providers are based in the United States. In that case, international data transfers are covered by the safeguards provided for in the Regulation, such as the Data Privacy Framework between the European Union and the United States or the standard contractual clauses approved by the European Commission.

7. your rights

You can exercise the following rights at any time:

• access to your data;
• rectification of any data that is inaccurate;
• erasure, when the data is no longer necessary;
• objection to and restriction of processing;
• data portability;
• withdrawal of the consent given.

To exercise them, write to info@barracarchitecture.com with the subject line ‘data protection’, stating which right you wish to exercise. If there is any doubt about your identity, we may ask you to prove it.

If you consider that your data has not been processed correctly, you can lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es).

8. minors

The website is not aimed at children under the age of fourteen. If you are under that age, do not send us any personal data without the consent of your parents or guardians.

9. security

Appropriate technical and organisational measures are applied to protect data against loss, misuse or unauthorised access. The website always runs over an encrypted connection.

10. social media

The website only links to the studio's Instagram profile; it does not include social media buttons or content that collect data when you visit it. If you interact with the studio on Instagram, that platform's privacy policy also applies.

11. changes to this policy

This policy may be updated to reflect changes to the website or to the law. The date of the last update is shown at the top of the page.

This page is a translation of the Spanish original, which prevails in case of discrepancy.