This is an English translation provided for information. In the event of any discrepancy, the Spanish version prevails.
Data controller
Alminar Servicios Culturales, S.L. · Tax ID (NIF) B91305607 · c/ Faustino Álvarez 29, local, 41002 Seville (Spain) · Phone +34 954 374 172 · [email protected].
What data we process and why
- Enquiries by email or phone: the data users give us when they write to us or call us (name, contact details and the content of their enquiry). Purpose: to answer the enquiry, prepare a proposal and maintain any subsequent business relationship. Legal basis: pre-contractual measures at the request of the data subject (Art. 6.1.b GDPR) and legitimate interest in replying to those who contact us (Art. 6.1.f).
- Browsing: to deliver the pages and protect the website, the server and our network provider record technical data about each visit (IP address, date and time, page requested and browser). This data is used only for security and operational purposes and is deleted after a short period. Legal basis: legitimate interest in keeping the website available and secure (Art. 6.1.f).
- Visit statistics: we use Plausible Analytics, installed on our own server, which does not use cookies or store IP addresses; to count unique visitors it uses an anonymous identifier that changes every day and cannot be used to follow anyone from one day to the next. It only provides aggregated figures (page views, referrer, country, device type, downloads and links clicked). This data cannot be used to identify anyone and no profiles are built.
No automated decisions with effects on individuals are made.
Commercial communications
We will only send commercial information to those who have requested it or who have a prior contractual relationship with us, always with the option to unsubscribe in each message or by writing to [email protected].
Recipients and transfers
We do not share data with third parties unless required by law. Our service providers (web hosting, content delivery and security network, email) access data only to provide their service and under a data processing agreement. The website and statistics are hosted on servers located in the European Union. The website is served through Cloudflare, Inc. (United States), which is certified under the EU-US Data Privacy Framework and bound by the European Commission’s standard contractual clauses; if any other provider were to process data outside the European Economic Area, it would do so with the same safeguards.
Links to our social media and to Google Maps lead to third-party websites: if users visit them or interact with our profiles, those third parties process their data under their own policies.
Retention
Enquiry data is kept for as long as the relationship or enquiry lasts and, afterwards, for the legal limitation periods (generally five years). Technical browsing records are kept for thirty days at most, unless they are needed to investigate a security incident.
Rights
Users can exercise their rights of access, rectification, erasure, objection, restriction of processing and portability by writing to [email protected] or by post to the address above, with proper identification. If they consider that their rights have not been respected, they can lodge a complaint with the Spanish Data Protection Agency (aepd.es).
Security
We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or alteration.