This Privacy Policy explains how Terraza Levante ("we", "us") collects, uses, stores, and protects personal data when you visit our website, contact us about terrace design services, or engage us for roof terrace layouts, patio deck builds, shade systems, and related work in València, Spain.
Data Controller
The data controller is Terraza Levante, Carrer de Colón 48, 46004 València, Spain.
Email: [email protected]
Phone: +34 96 351 2290
Personal Data We Collect
Depending on your interaction with us, we may collect:
- Identity and contact data: name, email address, phone number, postal address, apartment or building address where terrace work is planned
- Project and service data: terrace dimensions, rooftop or patio access details, photos you submit, preferred services (site survey, roof layout, patio deck, shade sails, planter systems), budget range, community-by-law constraints, structural notes, and contractor preferences
- Communication data: messages sent via contact forms, email, phone, WhatsApp, or in-person consultations at our Colón studio
- Contract and billing data: invoice details, payment references, tax identification where required for B2B clients, and correspondence relating to quotes (€380 site surveys through €7,800 full coordination packages)
- Technical data: IP address, browser type and version, device information, operating system, pages visited, time spent, referral source, and approximate location derived from IP (via cookies where enabled)
- Marketing preferences: opt-in status for project updates, seasonal maintenance reminders, or studio newsletters
- Visit and appointment data: dates and times of site surveys, studio consultations (€95/h), and project milestones recorded in our scheduling system
Purposes and Legal Basis (GDPR)
We process personal data under Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR), the Spanish Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights (LOPDGDD), and applicable implementing regulations on the following bases:
- Contract / pre-contract steps (Art. 6(1)(b) GDPR): responding to quote requests, performing site surveys, preparing roof terrace layouts, patio deck specifications, shade sail designs, planter system plans, coordinating contractors, and managing active client relationships
- Legitimate interests (Art. 6(1)(f) GDPR): responding to general enquiries, improving our services and website, maintaining studio security, preventing fraud, and managing business operations—balanced against your rights and freedoms
- Legal obligation (Art. 6(1)(c) GDPR): accounting, invoicing, tax compliance under Spanish law (including IVA records), and responding to lawful requests from public authorities
- Consent (Art. 6(1)(a) GDPR): non-essential cookies, optional marketing communications, and photography consent when project images may be used in our portfolio
Cookies and Similar Technologies
Our website uses necessary cookies for basic operation and security. Analytics, preference, or marketing cookies, if introduced, run only with your consent where required under the ePrivacy Directive and Spanish transposition. See our Cookies page for categories, retention periods, third-party providers, and instructions on how to withdraw consent or manage preferences.
Data Retention
- Enquiry and quote data: retained for up to 24 months after the last meaningful contact unless an active client relationship continues or you request earlier deletion where legally permitted
- Project files and layout drawings: retained for 36 months after project completion to support warranty queries, community-board documentation, and potential follow-up work
- Invoices and tax records: retained for the period required by Spanish commercial and tax law (generally 6 years under the Código de Comercio and relevant tax regulations)
- Marketing consent records: kept until you withdraw consent plus a short audit period (typically 12 months)
- Technical and security logs: retained for up to 12 months unless a longer period is required for incident investigation
- Contact form submissions: processed promptly; archived copies may be kept in email systems according to our retention schedule above
Who We Share Data With
We share personal data only as necessary with:
- Hosting, email, form processing, and cloud storage providers acting as processors under Article 28 GDPR data processing agreements
- Payment service providers and banks for transaction processing (we do not store full card numbers)
- Contractors, structural engineers, and shade sail installers where coordination requires sharing site addresses, access details, and project specifications
- Professional advisors (accountant, legal counsel, insurers) where necessary for business operations
- Public authorities, courts, or regulators when legally obliged under Spanish or EU law
We do not sell personal data. We do not use automated decision-making that produces legal or similarly significant effects concerning you.
International Transfers
Where tools or service providers process data outside the European Economic Area (EEA), we implement appropriate safeguards as required by Chapter V GDPR, such as Standard Contractual Clauses approved by the European Commission, supplementary technical and organisational measures where needed, or reliance on an adequacy decision. You may request details of transfers relevant to your data by contacting us at the address above.
Security
We apply technical and organisational measures proportionate to the risk, including access controls on studio systems, encrypted transmission (HTTPS) for our website, staff confidentiality obligations, and limited access to client project files. No method of transmission over the internet is completely secure; please avoid sending unnecessary sensitive data by unencrypted email.
Your Rights Under the GDPR and LOPDGDD
Depending on circumstances, you may have the right to:
- Access your personal data and obtain a copy (Art. 15 GDPR)
- Rectify inaccurate or incomplete data (Art. 16 GDPR)
- Erase data in certain cases, such as where it is no longer necessary for the purposes collected (Art. 17 GDPR — "right to be forgotten")
- Restrict processing in defined situations (Art. 18 GDPR)
- Data portability for data you provided, where processing is automated and based on contract or consent (Art. 20 GDPR)
- Object to processing based on legitimate interests or for direct marketing (Art. 21 GDPR)
- Withdraw consent at any time without affecting the lawfulness of processing before withdrawal (Art. 7(3) GDPR)
- Not be subject to solely automated decisions with significant effects, where applicable (Art. 22 GDPR)
To exercise these rights, contact [email protected] or write to Carrer de Colón 48, 46004 València. We respond within one month, extendable by two further months where requests are complex or numerous. We may need to verify your identity before disclosing data.
Data Protection Officer
We are not required to appoint a Data Protection Officer under Art. 37 GDPR given the nature and scale of our processing. Privacy enquiries are handled by studio management at the contact details above.
Children
Our services are directed at adults. We do not knowingly collect personal data from children under 14 without parental or guardian consent as required under Spanish law. Contact us if you believe we have received such data in error.
Complaints
If you believe your data protection rights have been infringed, you may lodge a complaint with the Agencia Española de Protección de Datos (AEPD) at www.aepd.es, C/ Jorge Juan, 6, 28001 Madrid, or with the supervisory authority in your EU country of residence. We encourage you to contact us first so we can address your concern directly.
Changes to This Policy
We may update this Privacy Policy to reflect legal, technical, or operational changes. The "Last updated" date at the top will change accordingly. Material changes may be communicated via email to active clients or a prominent notice on this page.
Questions: [email protected]