Privacy Policy

1. Data Controller

• Company: Casa Fresca BCN
• NIF/CIF: B24894891
• Registered address: Carrer de Casanova 37, 08011 Barcelona, Spain
• Contact email: casafrescabcn@gmail.com
• Phone / WhatsApp: +34 613 888 538

2. What Data We Collect

We collect personal data that you voluntarily provide to us through:

Contact and quote forms: name, phone number, email, neighbourhood, type of service requested, and any additional information you include in the message field.

WhatsApp: name, phone number, and the content of any messages you send us.

Analytical cookies (with your consent): anonymous browsing data via Google Analytics, such as pages visited, time on site, device used, and approximate location. This data does not allow us to personally identify you. For more information, please see our Cookie Policy.

Client portal: if you access our client portal, we store your email, name, associated company, and the properties linked to your account.

3. How We Use Your Data

We use your personal data exclusively for the following purposes:

Responding to your enquiry: when you request a quote or contact us with a question, we use your data to respond and manage the requested service.

Providing the contracted service: if you hire our services, we use your data to coordinate cleaning, communicate with you about dates and times, and manage invoicing.

Client portal access: to provide you with access to the portal where you can view photos and the cleaning history of your properties.

Website improvement: with your consent, we use analytical cookies to understand how visitors use our website and to improve the browsing experience.

We do not use your data to send unsolicited advertising. We do not sell, rent, or share your personal data with third parties for commercial purposes.

4. Legal Basis for Processing

The processing of your data is based on:

Your consent (Art. 6.1.a GDPR): by filling in a contact or quote form, you give us your consent to process the data you provide in order to respond to your request. By accepting analytical cookies, you give us your consent to collect anonymous browsing data.

Performance of a contract (Art. 6.1.b GDPR): if you hire our services, the processing of your data is necessary for the provision of the agreed service.

Legitimate interest (Art. 6.1.f GDPR): we may process your data for the maintenance and improvement of our business relationship, provided that this interest does not override your rights and freedoms.

Legal obligation (Art. 6.1.c GDPR): for compliance with tax and commercial obligations.

5. How Long We Keep Your Data

Contact and quote data: we keep your data for as long as there is an active business relationship or a pending enquiry. If no service is contracted, we delete your data within a maximum of 12 months from the last contact.

Client data: we keep your data for the duration of the contractual relationship and for the applicable legal retention periods (generally 5 years for tax obligations).

Analytical cookie data: data collected by Google Analytics is retained for 14 months, according to the standard Google Analytics configuration.

Client portal data: for as long as your account is active. You may request its deletion at any time.

6. Your Rights

In accordance with the GDPR, you have the following rights over your personal data:

• Right of access: you may request a copy of the personal data we hold about you.
• Right to rectification: you may request the correction of inaccurate or incomplete data.
• Right to erasure: you may request the deletion of your personal data when it is no longer necessary for the purpose for which it was collected.
• Right to object: you may object to the processing of your data in certain circumstances.
• Right to restriction: you may request the restriction of the processing of your data in certain circumstances.
• Right to data portability: you may request to receive your data in a structured, commonly used format.
• Withdrawal of consent: you may withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, send an email to casafrescabcn@gmail.com indicating your name, the right you wish to exercise, and a document proving your identity.

Response time: we will respond to your request within a maximum of 30 days.

If you believe that the processing of your data does not comply with current regulations, you may file a complaint with the Spanish Data Protection Agency (AEPD):

7. Data Recipients

Your personal data may be shared with the following recipients:

Google LLC: if you accept analytical cookies, anonymous browsing data is processed by Google Analytics. Google may transfer this data outside the European Economic Area. Google has Standard Contractual Clauses approved by the European Commission for these transfers.

Email provider: we use email services to manage communications. Emails you send us are stored on the servers of our email provider.

Hosting provider: our website is hosted by Vercel Inc. Form data is processed through their servers.

Public authorities: when required by law.

We do not share your data with any other third party except where legally required.

8. International Transfers

Data processed by Google Analytics and Vercel may be transferred to the United States. These transfers are carried out under the Standard Contractual Clauses approved by the European Commission, ensuring an adequate level of protection in accordance with the GDPR.

9. Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or destruction. Our website uses HTTPS encryption to protect data transmission.

10. Changes to This Policy

We reserve the right to modify this privacy policy to adapt it to legislative changes or new processing practices. Any modifications will be published on this page with the corresponding update date.