Privacy policy

ZARAZANJAS PRIVACY POLICY Version: 2026-10-ga4-v3 1. DATA CONTROLLER Ernesto Lahoz López, a self-employed professional operating under the commercial name Zarazanjas. Spanish tax identification number: 25467826H. Address: Santuario 14 (local), 50162, Villamayor de Gállego, Zaragoza, Spain. Contact: info@zarazanjas.es. Phone and WhatsApp: +34 684 414 186. 2. DATA WE COLLECT When you contact us or request a quote we may collect your name, phone, email and optional company; site location and coordinates if provided; planned dates, dimensions, ground conditions, additional services and notes; drawings, photographs and documents you supply; and the date, language and version of the accepted privacy information. Fields marked mandatory are needed to process your request. Company details and attachments are optional. 3. PURPOSES To answer enquiries and quote requests, assess the project and its execution, prepare and email estimates and quotations, maintain related communications and retain the documents needed for follow-up. Accepting the form does not subscribe you to advertising communications or automatically authorise website analytics. 4. LEGAL BASIS Requests are processed to take pre-contractual steps at the data subject's request. Where the contact represents a business or organisation, professional contact data is processed on the basis of the legitimate interest in responding to the enquiry and managing that professional relationship. Optional analytics relies on the visitor's consent. It can be rejected or withdrawn through Cookie preferences without preventing browsing or use of the form. 5. HOSTING AND SERVICES The website and its data are hosted on a VPS supplied by Hostinger International Ltd, established in Cyprus. The server is located in Paris, France, and is administered and managed by Ernesto Lahoz López. Requests use private server storage and the email service configured for the Zarazanjas domain. Requests and documents are communicated to the business for assessment, and estimates are sent to the email address provided. Technical providers needed to deliver these services and public authorities where legally required may be involved. 6. MAP, WHATSAPP AND ANALYTICS Activating the map requests tiles from the configured map provider, initially OpenStreetMap. The provider may receive the IP address and technical details required to serve the requested view. Coordinates or an unknown point can be provided without activating the map. WhatsApp links open an external service; communications through that channel are also subject to its terms and privacy policy. When the service is enabled and you expressly accept it, Google Analytics 4 measures page visits, WhatsApp or email clicks and successfully received requests. The page identifier, language and, for contact clicks, the channel are sent. The integration excludes names, companies, emails, phone numbers, documents, precise coordinates, request references and amounts; query parameters and URL fragments are also omitted from transmitted URLs. The provider is Google Ireland Limited, Ireland. Google may process browser identifiers, technical device and browsing data and approximate location according to the service configuration. Enhanced measurement, Google Signals, advertising personalisation and voluntary data sharing are disabled in the reported configuration of this property. Processing may involve Google LLC and subprocessors outside the European Economic Area, including the United States, with the transfer safeguards in Google's data processing terms, including standard contractual clauses where applicable. How Google processes data from sites using its services: https://policies.google.com/technologies/partner-sites?hl=en Data processing and transfer terms: https://business.safety.google/adsprocessorterms/ 7. RETENTION Requests and documents remain until manually deleted. Applicable erasure requests will be addressed. Data required by legal obligations will be retained for the applicable period. Backups retain the latest seven daily copies and four weekly copies, with a maximum age of 35 days. After a request is deleted, its data may temporarily remain in historical backups until rotation, within that maximum period. Restoring an older backup reapplies the deletion ledger to prevent deleted requests from becoming available again. Deletion also covers working copies, exports and business email messages. The choice to accept or reject analytics is remembered in the browser's local storage with a maximum validity of 24 months from the express decision, without extending the period on visits. Expired records are removed when the website runs again. The browser or visitor may delete them earlier. If storage is unavailable, the choice applies only to the current page. Hiding or closing the notice without choosing does not authorise analytics; only that dismissal is remembered while the tab remains open. The _ga cookie distinguishes browsers and is configured to expire up to 180 days after being set, without renewing its expiry on visits. The _ga_04EMSF16T3 cookie maintains measurement session state: Google may rewrite it with activity and renew its expiry for up to 180 days from that write. This renewal does not extend the 24-month choice period or authorise measurement without valid consent. Withdrawing acceptance blocks measurement and removes both cookies from the browser. The reported GA4 property settings are two months for event data and fourteen months for user data; application follows the service's retention settings and may differ for aggregated reports. These periods are independent of cookie lifetime and the validity of the choice. 8. YOUR RIGHTS You may request access, rectification, erasure, restriction, objection and portability where applicable by emailing info@zarazanjas.es. Where processing relies on consent, it can be withdrawn without affecting prior lawful processing. Additional information may be requested where needed to establish your identity. You may complain to the Spanish Data Protection Agency: https://www.aepd.es/. 9. UPDATES This information will be updated when processing or services change. The form records the version presented and accepted with each request. Analytics choices are bound to the corresponding information revision and measurement identifier; authorisations from previous versions are not reused for this revision.