Privacy Policy
Last updated: January 2025
At ObraDirecta we are committed to protecting your privacy and processing your personal data with full transparency, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPD-GDD).
1. Data Controller
The data controller for your personal data is:
- Company name: ObraDirecta
- Address: Barcelona, Catalonia, Spain
- Email: info@obradirecta.cat
- Phone: +34613422992
2. Data We Collect
We collect the following personal data:
- Contact / quote request form: full name, phone number, email address, type of service requested, and message.
- Browsing data: IP address, pages visited, time spent, and device data (via Google Analytics 4, if enabled).
- Cookies: as described in our Cookie Policy.
We do not collect special categories of data or data from persons under 14 years of age.
3. Purposes and Legal Bases
| Purpose | Legal basis |
|---|---|
| Responding to your inquiry and sending a quote | Pre-contractual performance / your consent (Art. 6.1.b and 6.1.a GDPR) |
| Commercial follow-up of your request | Legitimate interests of the controller (Art. 6.1.f GDPR) |
| Statistical analysis of web traffic | Consent given through cookie acceptance (Art. 6.1.a GDPR) |
| Compliance with legal obligations | Legal obligation (Art. 6.1.c GDPR) |
4. Data Retention
- Contact form data: retained as long as needed to handle your request and for the applicable limitation period (5 years).
- Web analytics data: per Google Analytics settings (maximum 26 months).
- Invoicing / contract data: minimum 5 years under Spanish tax law.
5. Recipients and International Transfers
Your data is not sold or shared with third parties, except with technology service providers bound by a data processing agreement and public authorities when required by law.
Google LLC (Google Analytics) may transfer data to the USA under appropriate safeguards (standard contractual clauses).
6. Your Rights
You may exercise the following rights at any time by emailing info@obradirecta.cat with the subject "Data Protection" and a copy of your ID:
- Access — know what data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion when data is no longer necessary.
- Objection — object to processing based on legitimate interests.
- Restriction — restrict processing in certain circumstances.
- Portability — receive your data in a structured, machine-readable format.
- Withdraw consent — at any time, without affecting prior processing.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.
7. Security
We implement appropriate technical and organisational measures to ensure the security of your personal data and prevent unauthorised access, loss, or alteration.
8. Cookies
Our website uses first-party cookies (necessary for operation) and third-party cookies (Google Analytics for statistical analysis). You can manage your cookie preferences at any time through the cookie banner or your browser settings.
9. Changes to This Policy
We reserve the right to update this Privacy Policy to reflect legislative changes. We recommend reviewing it periodically. The date of the last update appears at the top of this document.