Privacy policy

1. Data controller

The controller is ANGEL NAVARRO RODRIGUEZ, trading as AcuaRapido San José. Their tax identification and contact details appear on this page. The address is for correspondence only. For privacy matters, write to info@acuarapido.com with “Data protection” in the subject or use that postal address. No data protection officer has been appointed; requests go to the controller. No account is required to browse or contact us.

2. Data we may process and its source

Contact: name, your chosen email or telephone, job description and information you choose to provide in later communications. If you request a visit or quotation, we may ask for the job location and strictly necessary details. The form does not request identity documents, banking details, health information or attachments. Do not include sensitive categories or unnecessary third-party data.

Browsing and security: IP address and connection details may be processed by the infrastructure serving the website. The application uses IP-derived identifiers to limit abusive private-area access attempts; these are not advertising profiles. Administration: authorised account identifier, hashed password and session information. There is no public user registration. Contact data comes from you or someone lawfully acting on your behalf.

3. Purposes and legal bases

Service or quotation requests: respond, clarify requirements, prepare a proposal and organise requested work, based on steps taken at your request before a contract or performance of a contract (GDPR Article 6(1)(b)).

General enquiries and correspondence: our legitimate interest in responding and managing the relationship with people who contact us (Article 6(1)(f)), limited to reasonable expectations and subject to your right to object.

Security, abuse prevention and legal claims: legitimate interests in protecting the website and the owner’s rights (Article 6(1)(f)). Legal obligations and rights requests: compliance with applicable law (Article 6(1)(c)). Where additional processing requires consent, it will be requested separately beforehand. The “I have read the policy” checkbox acknowledges information; it does not authorise advertising or replace these legal bases.

4. Form and communications

To handle a request we need a name, a valid contact method and a sufficient description. Without these we cannot process it. Choose email or telephone; both are not required. The form clearly indicates whether submission is available. While disabled, it does not transmit enquiries; email and telephone links remain available.

When enabled, details will be sent to the owner’s contact inbox. The form does not create a public database, publish your message or send automated marketing replies. A submission confirmation is not a contract or an appointment. This application does not save the text you enter in cookies or browser local storage. Email and WhatsApp messages are also subject to the operation of those channels.

5. Retention periods

Enquiries that do not lead to a contract are kept while being handled, for no more than six months from receipt. The designated person will delete the data at the end of that period, except where a legal duty or a specific claim justifies retaining limited information with restricted access.

Where a contract exists, necessary records are kept for the applicable contractual, tax, accounting and liability periods. The six-month period does not require the destruction of contracts, invoices or evidence that must legally be retained, nor justify keeping all incidental messages.

Deletion must cover email, management sheets or applications and working copies. Backups follow their replacement cycle and must not reintroduce deleted data when restored. The editor session expires after eight hours. Infrastructure log periods depend on their configuration; where legally required, records will be blocked with restricted access until final deletion.

6. Recipients and providers

The owner and the person expressly authorised to handle enquiries access messages as needed to respond. Enquiries may be organised in a restricted-access sheet or management application. They are not published, sold or shared with advertisers. Data may be disclosed to public authorities or courts where legally appropriate, or to professionals whose involvement is necessary for obligations or claims.

Contact email is read and managed through Gmail, provided by Google. This service processes sender and recipient details, message contents and included files to transmit, store and manage correspondence. The contact mailbox is info@acuarapido.com. Technology providers for email, hosting and, where applicable, enquiry management may access data to provide their services. You may ask the controller for information about providers involved in your communication.

The website uses Cloudflare for hosting and page delivery. Editor data is stored in a private Cloudflare D1 database configured for European Union jurisdiction. If you choose WhatsApp, its service terms also apply. The link does not embed a WhatsApp chat in the website. Form delivery remains off until the relevant service is connected and documented.

7. Processing outside the European Economic Area

Cloudflare operates a global network. Although the editor’s D1 database is configured in the European Union, request handling and other services may involve processing outside the European Economic Area. This setting does not restrict all processing to Spain or the EU.

Transfer safeguards must match the actual service, entity and contract. Final information on the mechanisms applicable to hosting, email and the future management tool remains to be completed. An adequacy decision or standard contractual clauses are not presumed merely from a provider’s name. Contact the controller at info@acuarapido.com with questions.

Google states that information may be processed on servers in different countries and publishes the privacy frameworks and standard contractual clauses it uses, as applicable, on its data-transfer frameworks page. Using Gmail does not mean every message is stored in Spain or the European Union. Ask the controller at info@acuarapido.com for information about safeguards applicable to your communication.

8. Your rights and how to exercise them

You may request access, correction of inaccurate data, erasure, restriction, portability where applicable and object to processing based on legitimate interests. If processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing. Rights are subject to the legal requirements and exceptions relevant to each case.

Write to the contact email or postal address, identifying yourself and explaining your request. Do not initially send a full identity-document copy: proportionate additional information will only be requested if there are reasonable doubts about identity. Requests are free apart from legally permitted exceptions for manifestly unfounded or excessive requests. A response will be provided within one month; complexity or number of requests may justify a further two months, with the extension and reasons communicated during the first month. You may complain to the Spanish Data Protection Agency (AEPD), including without first complaining to the owner.

9. Security and confidentiality

The application restricts editor access through authentication, protects sessions and validates form inputs. Admin passwords are not stored in plain text. The form does not embed third-party advertising, tracking or CAPTCHA tools. These measures cannot promise zero risk: avoid sensitive documents or unnecessary data and report suspected misuse to the owner. For urgent plumbing, call during the advertised hours; email and the form do not guarantee immediate attention.

10. Children, advertising and automated decisions

The website and job enquiries are intended for adults. We do not seek to collect children’s data; if a minor’s communication requires a representative, their involvement will be requested or unnecessary data erased. Contacting us does not subscribe you to marketing newsletters. We do not create commercial profiles or make automated decisions with legal or similarly significant effects. Automated security checks only limit abuse and do not assess eligibility for a service.

11. Updates and questions

This policy reflects the functions described on its update date. Changes to purposes, providers, forms or technologies require updated information and, where necessary, additional notice or consent before new processing begins. You may ask the controller for clarification at any time. The cookie policy supplements this information for browser technologies.