Privacy Policy

1. Controller

The data controller for the personal data described in this policy is Sebastián Amaya Vela, Registered Architect nº 741 of the Official College of Architects (COA) of Cádiz, who provides this website under the name SLP Arquitectos.

The professional office is located at Plaza de la Constitución 3, Oficina 1A, 11140 Cádiz (Spain). You can contact the data controller by telephone at +34 653 03 48 15 or by email at sebastianav@arquitectosdecadiz.com.

No Data Protection Officer has been designated, because this website carries out none of the processing that requires one under article 37 of the GDPR: there is no large-scale processing, no special categories of data, no automated decision-making and no data held by public authorities. If that ever changes, we will appoint one and say so on this page.

2. Scope of This Policy

This policy informs you of how your personal data is processed when you browse this website and when you contact the studio, in accordance with articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and with Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD). It applies to every visitor of this website, in any of the languages it is published in, and to every person who gets in touch with the studio about a project.

3. What This Website Does Not Collect

Browsing this website requires you to provide no personal data. The site installs no cookies, uses no local or session storage, contains no analytics, no fingerprinting, no web beacons, no contact form and no JavaScript. As a result, the website itself neither collects nor transmits any personal data about its visitors: nothing you do here is sent to a server by the site, and nothing is stored on your device.

4. Hosting and Connection Data

This website is served by the hosting provider Soluciones Web On Line S.L. (ProfesionalHosting), tax identification number B04437729, registered at Calle Hermanos Machado 19, CP 04720 El Parador, Almería (Spain), telephone +34 911 401 900, entered in the Commercial Register of Almería, Volume 748, Folio 183, Sheet AL-20374. The provider acts as processor on behalf of the data controller under a processor agreement, which you can read in full on the provider's website. The servers that deliver this site are located in Spain.

As any web server must, the provider registers connection data in order to deliver the pages and keep the service secure: the IP address from which the request arrives, the date and time of the request, the address requested and the browser identification sent by your device. These records are used for security, availability and incident diagnosis. The lawful basis for this processing is the controller's legitimate interest in keeping the site available and secure (article 6.1.f of the GDPR).

The provider applies its own retention term to those records, and the terms are set out in the processor agreement linked below: the duration is indefinite by default and, in any case, tied to the hosting relationship, and on the end of the service the provider destroys the data, keeping only a blocked copy for the applicable legal limitation periods (clauses 4 and 7.12). Its privacy notice describes the connection details a web provider registers when you browse —IP address, MAC address, browser, operating system and duration of the visit— but publishes no period for them, which is why we point to the agreement. The studio neither accesses nor receives those records, and it does not use them to identify visitors. Any question about them is answered by the provider at protecciondedatos@profesionalhosting.com.

All of these documents are published on the provider's website. Its hosting contract governs the service and incorporates the processor agreement as a contractual annex in its data-protection clause, and the processor agreement itself is published in full. The provider's legal notice, the document that identifies it as the owner of its site under article 10 of the LSSI-CE, records its registered company name as Soluciones Web On Line S.L. with the same tax identification number and registry entry quoted above, so you can check that the company described here is the one that actually serves this site.

5. Data You Send Us Voluntarily

When you contact the studio by email, by telephone or through the addresses published on the contact page, or when you send us a project enquiry, you provide personal data voluntarily. The categories involved are the contact details you choose to give us, the content of your message, and any project information you attach to it such as plans, photographs, addresses or documents.

We use that data to answer your enquiry and to reply to you. Where the enquiry leads to a professional engagement, we also use it to take the pre-contractual steps that lead to that engagement, and to comply with the legal obligations that apply to our profession. The lawful bases are your consent and, where the enquiry precedes a contract, the steps taken at your request prior to entering into it (article 6.1.a and 6.1.b of the GDPR).

Providing a means of contact is necessary for us to be able to answer you, so without it we cannot respond to your enquiry. Any other detail you choose to share is voluntary and simply helps us answer you better.

We keep this data for as long as it takes to handle your enquiry. Once the enquiry is closed, the data is kept only for the statutory limitation periods, in case a claim relating to it is made. Where the enquiry leads to a professional engagement, the client and contract data are kept for five years, the period set by article 1964 of the Spanish Civil Code for answering claims arising from a contract.

6. Recipients

Your personal data reaches two processors. The first is the hosting provider identified in section 4, Soluciones Web On Line S.L. (ProfesionalHosting), which stores the files of this site and whose data centres are in Spain. The second is Arsys Internet S.L.U. (NIF B-85294916, Calle Madre de Dios 21, 26004 Logroño, La Rioja, Spain), which operates in Spain the servers of the mailbox that hosts the address published on this site, under the service name serviciodecorreo.es. It is a separate service: it is not run by the web hosting provider. That address does not belong to the studio: it is created under the architectsdecadiz.com domain, which is owned by the Ilustre Colegio Oficial de Arquitectos de Cádiz (CIF Q1100469D), the professional body the studio's registered architect belongs to. The Colegio engaged Arsys to provide the service and maintains it, administering the accounts: it creates them and removes them. Both operators act as processors on the controller's behalf. Your data is not sold, rented or traded, and it is not used for advertising or for building advertising profiles.

Every message sent to that mailbox is read by Sebastián Amaya Vela, who answers you and deletes it once the matter is closed, keeping only what the statutory limitation periods require. If you want to know how the Colegio treats your personal data, that is a question for the Colegio itself: it publishes its own contact details, and we are not the right address for it, nor do we answer on its behalf.

The studio's staff access the data you send us only in order to answer you. No other third party receives it, except where a public authority or a professional body requires it under a legal obligation.

This website links to the studio's profiles on Facebook and Instagram, platforms owned by Meta Platforms Ireland Ltd. Nothing is sent to those platforms simply by reading this page. If you follow one of those links, your data —including your IP address and your browser identification— leaves this website and is processed by Meta under its own privacy policy, which we do not control. That is the only case in which your data reaches a third party as a result of an action you take on this site.

7. International Transfers

Two situations have to be told apart. The processing described in this policy takes place in Spain —the web hosting provider's servers are there, the mail service of the address published on this site is operated there too, and the studio works there—, so that processing transfers no personal data to a country outside the European Union or the European Economic Area.

The one exception is the outbound link described in section 6: when you follow a link to Facebook or Instagram, the request is delivered to Meta Platforms Ireland Ltd. and the service is provided from the United States, a country with no adequacy decision. We do not decide that transfer —Meta carries it out under its own safeguards, which it publishes and which we do not control— but we are telling you that your data leaves the European Economic Area as soon as you press the link. You can read Meta's transfer terms here.

8. Automated Decision-Making and Profiling

No automated individual decision-making with legal or similarly significant effects is taken on your personal data, and no profiling is carried out. Nobody at the studio builds a profile of you.

9. Your Rights

You may exercise the following rights over your personal data: access, rectification, erasure, restriction of processing, portability, objection and withdrawal of consent, as recognised by the GDPR and the LOPDGDD. Where processing rests on legitimate interest, you also have the right to object to it.

To exercise any of these rights, write to us free of charge at sebastianav@arquitectosdecadiz.com or by post to Plaza de la Constitución 3, Oficina 1A, 11140 Cádiz (Spain). We will reply within one month. That period may be extended by two further months where the number of requests received justifies it; in that case we will tell you within the first month and explain the reasons. If we ask for information to identify you, we will only ask for what is necessary for that purpose.

You also have the right to lodge a complaint before the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), at Calle Jorge Juan 6, 28001 Madrid, or through its website at www.aepd.es, if you consider that your data has not been handled properly.

10. Security

This website is served exclusively over HTTPS. Its fonts, icons, stylesheets, scripts and images are all served from the site's own domain, and the site loads no code, no font, no analytics and no embed from any third party. Because the site contains no form and no JavaScript, it sends no personal data from your browser to any server.

11. Cookies

This website sets no cookies. Everything you need to know about cookies and how they work in general is set out in our cookie policy, which is the only place where that information is maintained.

12. Changes to This Policy

The version published on this page is the version that applies. We may update it when the site or the applicable rules change, and the date below shows when it was last reviewed.

This document describes the processing carried out by this website as of the date below. It is not legal advice.

Last updated: 3 October 2026