Privacy Policy

At Creative Walls we take the protection of your personal data seriously. This policy explains how we process the information you provide, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD).

1. Data controller

• Controller: David Paredes Alonso («Creative Walls»)
• Tax ID (NIF): 56077060R
• Address: Calle Casas de Hunosa, nº 7, 2.º D, Las Masas, Morcín, 33161, Asturias, Spain
• Email: info@creativewallsagency.com

2. What data do we process and for what purpose?

We process the data you provide through the free-audit request form or by other means of contact (email, phone or WhatsApp): full name, email, phone, business sector and any information you choose to include in your message. The purpose is to:

• Respond to your request and get in touch with you to prepare the diagnosis or proposal.
• Manage the business relationship and, where applicable, provide our services.
• Send you communications related to your enquiry or our services, where there is a legal basis for it.

Free guides. If you request one of our guides from the website, we use your name, email and the type of business you indicate to send you the guide for your sector and, over the following two weeks, a maximum of five related emails with practical ideas and the chance to talk to us. You can stop receiving them at any time using the unsubscribe link in every email.

Newsletter. If you tick the subscription box and confirm it from the email we send you, we will send you a weekly newsletter with content on marketing for the construction sector and on the use of artificial intelligence in business. You can unsubscribe whenever you wish from any issue.

Management of business contacts. If you click the «Quiero hablar» («I want to talk») button in one of our emails, we record your interest in our customer management tool so we can reply to you and follow up on the conversation.

Measuring our emails. We do not use pixels to know whether you open our emails. We only record whether an email has been delivered or rejected and, when you click a link, which content you wanted to go to, so we can send you what interests you and let us know if you want to talk to us.

3. Legal basis for processing

The legal basis is your consent, given when you submit the form or contact us, and the application of pre-contractual measures or the performance of a contract once you become a client. You can withdraw your consent at any time.

In detail, for email communications:

• Guides and related emails: your consent, given when you submit the form to receive the guide (art. 6.1.a GDPR).
• Newsletter: your express consent, given by ticking the box and confirming it from your email (art. 6.1.a GDPR and art. 21 LSSI).
• Handling your contact request: the application of pre-contractual measures at your request (art. 6.1.b GDPR).

You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out before its withdrawal.

4. How long do we keep your data?

We will keep your data for as long as our relationship lasts and, once it ends, for the legally required periods. If your enquiry doesn't lead to a business relationship, we will delete your data when it is no longer necessary for the purpose for which it was collected.

We keep the data of subscribed people until they unsubscribe. If you unsubscribe, we stop sending you communications immediately and keep only your email and the date of unsubscription, blocked, so we can prove that we respect your decision and for the legal limitation periods of possible liabilities. The data of people who download a guide and do not subscribe to the newsletter is kept for a maximum of 24 months from the last contact.

5. Who do we share your data with?

We do not share your data with third parties except by legal obligation. We do use technology providers that act as data processors and may host or process data on our behalf:

• Web3Forms: handling the contact form submission by email.
• Vercel Inc.: website hosting and protection of the form against bots.
• Amazon Web Services EMEA SARL (Amazon SES): sending emails. Servers in the European Union (Ireland).
• n8n (installed on a Creative Walls own computer): automation of sign-ups, mailings and unsubscriptions. Spain, with no third-party access.
• Supabase Inc.: customer management tool (only if you click «Quiero hablar»). Servers in the European Union (Germany).
• Google Ireland Ltd. (Google Drive):backup copy of the contact list. European Union, with Google's safeguards.
• Google (Google Analytics): web analytics, only if you have accepted cookies. See the Cookie Policy.

Some of these providers may be located outside the European Economic Area; in that case, international transfers are covered by the appropriate safeguards provided by the GDPR (such as the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses). These providers process data only on our behalf and under a data processing agreement.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to us at info@creativewallsagency.com, stating the right you wish to exercise. If you believe we have not processed your data correctly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

You can also unsubscribe from any communication with one click from the link at the bottom of every email, or by writing to info@creativewallsagency.com with the subject «Baja».

7. Security

We apply the appropriate technical and organisational measures to guarantee the security of your data and prevent its alteration, loss, unauthorised processing or access.