Privacy policy

Data controller

[Razón social pendiente] (KONSTRUKT), NIF [NIF/NIE pendiente], with its address at [Domicilio fiscal pendiente], Barcelona. For any question about your data, you can write to us at [email protected] or call us on +34 672 233 004.

This policy explains what personal data we process through konstruktgroup.com, for what purposes, on what legal basis and what rights you have, in accordance with Regulation (EU) 2016/679 (RGPD, known in English as the GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

What data we process

Quote requests: name, phone number, email (optional), neighbourhood or town, the service you are interested in, a description of the job, language, the page you send the form from, campaign parameters (utm) if you arrive from an ad, and the date and time you accept this policy.

Reviews: name, rating, text, service and, if you provide it, email, which is not published.

Quote assistant, when active: the messages you write in the conversation.

Technical data: IP address and browser type, which we use to limit abuse and automated submissions, and, only if you accept measurement in the cookie notice, pseudonymised browsing data from our own analytics (pages viewed, clicks on phone or WhatsApp, scroll depth).

Please do not include health data or other special categories of data, or data about other people, in the text fields.

Why we use it and on what legal basis

Replying to your request, arranging the visit, preparing the quote and, if you accept it, managing the job: your consent and the taking of pre-contractual steps at your request, or the performance of the contract (Article 6.1.a and 6.1.b RGPD).

Sending you news and offers by email, phone or WhatsApp, only if you tick the relevant box: your consent (Article 6.1.a RGPD and Article 21 LSSI-CE). This is optional and does not affect your quote.

Publishing your review after checking it: your consent, which you give by submitting it.

Measuring use of the website with our own analytics, and the effectiveness of our ads: your consent, which you give by pressing ‘Accept’ in the cookie notice and can withdraw at any time (Article 6.1.a RGPD and Article 22.2 LSSI-CE).

Protecting the website against spam and abuse: our legitimate interest (Article 6.1.f RGPD).

We do not make automated decisions or build profiles that produce legal effects concerning you.

Who may receive your data

We do not sell or pass on your data. We rely on providers that process it on our behalf under a data processing agreement: web and database hosting, the email provider we use to confirm receipt when you give us your email address and, if you use the assistant, an artificial intelligence provider that generates the answers.

To alert our team to each new request or review, we use a third-party instant messaging service whose provider is established outside the European Economic Area. That provider does not process this data on our behalf under a data processing agreement, and we have not signed standard contractual clauses with it: it handles the data under its own privacy policy. The alert goes to a private team chat and contains the data you send in the form (for reviews, without your email address), the page you send it from and, if you arrive from an ad, the campaign.

If you accept the advertising tools, Google Ireland Limited and Meta Platforms Ireland Limited receive data about your browsing on this website and, when conversion measurement is enabled, when you send a request we also send Meta your email address and phone number, pseudonymised with a hash function (SHA-256), together with your IP address and browser, to find out whether the request came from an ad. If you don’t accept, nothing is sent to Meta; the Google tag stores no cookies but may send Google cookieless signals to count conversions in aggregate. You can withdraw your consent at any time via ‘Cookie settings’ or object by writing to [email protected].

Some providers working for us under a data processing agreement, as well as Google and Meta, may process data outside the European Economic Area. In that case, the transfer is covered by a European Commission adequacy decision, such as the EU-US Data Privacy Framework, or by standard contractual clauses approved by the Commission.

We may also disclose data to public authorities, courts or law enforcement agencies where the law requires us to do so.

How long we keep it

Requests that do not become a job: for as long as needed to deal with them and follow up on the quote; after that, they are deleted or anonymised.

Clients: for the duration of the contractual relationship and, afterwards, for the limitation periods of the relevant legal, tax and guarantee obligations.

Marketing communications: until you withdraw your consent.

Reviews: while they remain published or until you ask us to remove them.

Our own analytics data: in pseudonymised form and only for as long as needed to produce aggregate statistics.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent you have given at any time, without affecting the lawfulness of processing carried out before you withdrew it.

Write to us at [email protected] stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask for additional information to confirm it. We will reply within one month at most.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD; www.aepd.es).

Minors

Our services are intended for adults. If you are under 14, please do not send us personal data without the consent of your parents or guardians.

Security

We apply technical and organisational measures appropriate to the risk: encrypted connections, access to data limited to the people who handle requests, and providers that offer sufficient guarantees.

Changes to this policy

We may update this policy to reflect legal changes or changes in how the website works. The date of the latest update is shown on this page.