PRIVACY POLICY
Last updated: August 12, 2025
At Sofía C. Zarauz Estudio, we take the privacy and protection of your personal data very seriously. This policy explains how we collect, use, and protect the information you provide when you use our website [www.sofiaczarauz.com] and our services.
1. Data Controller
Business name: Sofía C. Zarauz Studio
Owner: Sofía C. Zarauz
2. Data we collect
We may collect the following personal data when you interact with us:
Contact information: name, surname, email address, telephone number.
Browsing data: IP address, device type, operating system, browser, pages visited and time spent on the site.
Data related to budget requests or contact: information that you voluntarily provide to us in forms or emails.
We do not request specially protected data (health, religion, sexual orientation, etc.) and, if you provide it to us voluntarily, it will be treated with the utmost confidentiality.
3. Purposes of the processing
We process your personal data for the following purposes:
Respond to your inquiries and requests submitted through contact forms, email, or phone.
Manage and prepare budgets for interior design projects.
Maintain the contractual and administrative relationship in case of contracting our services.
Sending commercial communications related to our services, provided you have given your express consent.
Improve the browsing experience and website performance through statistical analysis of usage data.
4. Legitimization for the processing
The legal basis for processing your data is:
Your consent is given by checking the acceptance boxes on the contact or subscription forms.
The execution of a contract in the event of contracting our services.
The legitimate interest in improving the quality of our website and our services.
5. Data retention period
Data provided through forms will be kept for a maximum of 12 months if no business relationship is established.
If you are a customer, we will keep your data for as long as the contractual relationship lasts and for the time necessary to comply with legal obligations (up to 6 years for tax regulations).
6. Communication of data to third parties
We will not share your data with third parties, except when legally required or with your prior consent.
We may work with external providers who act as data processors (e.g., hosting services, email marketing or management tools), with whom we maintain confidentiality and data protection agreements.
7. User Rights
You can exercise the following rights regarding your data:
Access your personal data.
Correct inaccurate or incomplete data.
Request the deletion of your data.
Limit or oppose treatment.
Request the portability of your data to another controller.
Withdraw your consent at any time.
To exercise these rights, you can write to us at [contact email address] indicating the right you wish to exercise and attaching a copy of your identity document.
You can also file a complaint with the Spanish Data Protection Agency (AEPD) if you believe that the processing of your data does not comply with the regulations.
8. Data Security
We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction or alteration.
9. Changes to this policy
We may update this policy to reflect legal changes or changes in the operation of our website. We recommend that you review it periodically.