Data protection

Privacy policy

Data controller

CREACIONS AMB ALUMINI SL
Spanish tax ID (CIF): B57059602
Avinguda dels Pujols, 9, 07570 Artà, Illes Balears, Spain.
Telephone: +34 971 836 635
Data protection contact: [email protected].

Data, purposes and legal basis

We process your name, telephone number, email address, project location, project type and description, as well as any documents you attach. We use this information to respond to your enquiry, prepare or manage the commercial relationship you request, and contact you about it. The legal basis is your consent when you submit the form and, where applicable, steps taken at your request before entering into a contract.

Service providers and recipients

The site uses Cloudflare services for Pages, Workers, Turnstile and R2. Pages serves the site; Workers processes the form; Turnstile helps prevent automated submissions; and R2 stores enquiries and attachments privately, including a private daily backup. Authorised Creacions personnel receive enquiries internally.

Resend provides delivery of the transactional notification to [email protected]. Attachments are retained in R2; email is an operational notification.

Location, subprocessors and transfers

The R2 buckets were created with a Western Europe location designation. Cloudflare describes this designation as best-effort and not a data-residency guarantee. Cloudflare operates a global network and its documentation describes limited processing of metadata in the United States and Europe for its core services. Its data processing terms and transfer mechanisms are available in its DPA and privacy and transfer information.

Resend (Plus Five Five, Inc.) may process data and use subprocessors outside the European Economic Area, including in the United States. Its DPA, privacy policy and current subprocessor list describe the processing and applicable safeguards. Creacions does not independently initiate other international transfers beyond those inherent to these providers.

Retention

Enquiries and attachments are retained for 365 days in primary storage. The private backup is retained for 395 days. Incomplete uploads are deleted after 7 days.

Your rights and complaints

You may request access, rectification, erasure, objection, restriction or portability by writing to [email protected]. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).