Privacy Policy | matemintpickbcn.yachts

1. Data Controller Information

The data controller responsible for the processing of your personal information collected via this website is Matemint Pick Thermal Architecture S.L., registered under Spanish fiscal identification number ES-B88492014, with registered office at Carrer de Provença 328, 08037 Barcelona, Spain. For any privacy queries or data rights requests, you can contact our privacy officer directly at [email protected].

2. Personal Information We Collect

We adhere strictly to the principle of data minimization under Regulation (EU) 2016/679 (GDPR). We collect information only where necessary to address your architectural inquiries or ensure website stability:

Project Inquiry Details: When you complete our consultation contact form, we collect your full name, email address, phone number (if provided), project typology (residential, hospitality, commercial), project location/region, estimated room footprint, and any specific notes or architectural sketches you share.
Technical Diagnostics: To safely deliver web pages, our web server temporarily logs standard HTTP headers, including your IP address (anonymized at subnet level), user-agent string, operating system type, referring URL, and exact access timestamps.
Preference State: We store your cookie consent selection inside your local browser storage (`localStorage`) so that your choice persists across visits without generating intrusive repetitive prompts.

3. Legal Bases for Processing

We process your personal information under the following legal frameworks recognized by European law:

Pre-Contractual Measures (Art. 6(1)(b) GDPR): Responding to your sauna construction inquiries, assessing project viability, generating technical specifications, and preparing cost estimates.
Legitimate Interests (Art. 6(1)(f) GDPR): Securing our web infrastructure against automated denial-of-service abuse, diagnosing server errors, and managing studio business communications.
Consent (Art. 6(1)(a) GDPR): Storing non-essential analytical cookies where you have explicitly opted in via our cookie management interface.

4. Data Retention Periods

We do not hold data indefinitely. Project inquiry submissions that do not transition into active design or construction contracts are permanently purged from our primary communications database within twenty-four (24) months from the last documented interaction. Technical server logs are rotated and deleted automatically every thirty (30) days. Contractual, financial, and building warranty records are retained for the statutory period mandated by Spanish commercial and civil construction law (up to 10 years).

5. Third-Party Processors & International Transfers

We do not sell, rent, or trade your personal details to third-party advertisers or data brokers. Data is processed exclusively on secure European cloud servers complying with ISO 27001 security certifications. If email relay servers momentarily route information through processors outside the European Economic Area (EEA), such transfers are governed by standard contractual clauses (SCCs) approved by the European Commission to guarantee equivalent privacy protection.

6. Your Statutory Rights Under the GDPR & International Laws

Regardless of your country of residence, we afford all visitors standard GDPR data rights:

Right of Access: You may request a copy of the personal information we hold about you.
Right to Rectification: You may correct inaccurate or incomplete contact or project records.
Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where continued retention is no longer justified.
Right to Restrict or Object: You may restrict the scope of processing or object to processing based on legitimate studio interests.
Right to Data Portability: You may receive your data in a structured, machine-readable format.

To exercise any of these statutory rights, please email us at [email protected] with the subject line "Data Subject Request". We will acknowledge and resolve your request within thirty (30) calendar days without charge. You also hold the right to lodge a formal complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) at www.aepd.es or your national supervisory authority.

7. Security Safeguards

All data transmitted between your browser and our server is encrypted in transit using Transport Layer Security (TLS 1.3). Access to our internal project management tools is protected by multi-factor authentication and role-based access restrictions.

8. Updates to this Policy

We may revise this privacy document occasionally to reflect updates in architectural studio operations or statutory European regulations. Any alterations will be published on this page with an updated effective date.