Skip to content
OMarquitectura
← Back to the studio

Privacy policy

Last updated: 5 October 2026

This policy explains how OMarquitectura processes personal data under Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights.

OMarquitectura is committed to protecting your privacy. This document describes the information processed, its purposes, retention and how to exercise your rights.

I. Data controller

Maria Rosa O.M. · OMarquitectura
Calle Hostal 18, 03725 Teulada
info@om-arquitectura.studio
+34 647 894 250

Self-employed professional activity: architectural services.

II. Data, purposes and legal bases

2.1. Enquiries and information requests

When you contact us by email, telephone or WhatsApp, we process your identification and contact details and the information supplied to respond, understand your needs and prepare a proposal if requested.

Enquiries about an appointment are processed to take steps at your request before entering a contract (Article 6(1)(b) GDPR). Other professional communications rely on our legitimate interest in responding to enquiries (Article 6(1)(f)), balanced against your rights.

2.2. Professional services

Once an appointment is agreed, we process the data needed to manage the professional and administrative relationship and perform the commissioned work. The bases are performance of the contract and compliance with legal duties (Articles 6(1)(b) and 6(1)(c)). Further information will be provided where a project requires additional processing or disclosure.

2.3. Website operation

The website infrastructure may process technical data, such as IP addresses and access logs, to deliver the service, troubleshoot issues and prevent misuse. This relies on our legitimate interest in website security and availability (Article 6(1)(f)). See our cookie policy.

2.4. Sources and necessary information

Enquiry data comes directly from the person concerned. Only relevant and necessary information is requested. Missing essential details may prevent us from responding; unnecessary additional information is not mandatory. Avoid sending sensitive documents unrelated to your enquiry and tell us about changes needed to keep your data accurate.

This website does not currently offer newsletter subscriptions, create marketing profiles or make automated decisions with legal effects. Any new consent-based processing will require prior information and a specific request for consent where applicable.

2.5. Optional analytics

With your consent (Article 6(1)(a) GDPR), we use Google Analytics 4 to measure visits and interactions, including contact-link clicks. Google receives measurement data, which may involve international processing. You can reject or withdraw consent through Cookie settings. For cookie names, duration, provider terms and controls, see our cookie policy. Analytics does not provide us with the names of individual visitors.

III. Recipients and international transfers

Data may be disclosed to public authorities where legally required and to collaborators necessary for a commission, under the arrangements explained for that project.

Hosting, email and IT support providers may access data to deliver their services. Where they act as processors, appropriate contracts and safeguards required by data protection law must govern their involvement.

Technology services may involve processing outside the European Economic Area. Where an international transfer applies to processing managed by OMarquitectura, it must rely on a valid mechanism, such as an adequacy decision or appropriate safeguards, and the relevant information will be provided. You may request information about providers and safeguards by contacting the controller.

WhatsApp and Google Maps are external links, not embedded content. Using them opens services governed by their own policies, which may cover international processing. See the policies of WhatsApp and Google. You can contact us by email or telephone instead of WhatsApp.

IV. Retention

Enquiries are retained while needed to respond and manage follow-up. If an enquiry leads to an appointment, relevant data becomes part of the records for that professional relationship.

Once its purpose ends, data will be deleted or, where required, blocked for legally applicable liability periods. Professional, administrative and tax records are retained according to the duties applicable to each category.

V. Your rights

5.1. Access

You may find out whether we process your data, access it and receive information about purposes, recipients, retention and other processing conditions.

5.2. Rectification

You may request correction of inaccurate data and completion of incomplete data, taking its purpose into account.

5.3. Erasure

You may request deletion where a legal ground applies, for example when data is no longer needed. Exceptions include legally required retention and the establishment, exercise or defence of legal claims.

5.4. Restriction

You may request restricted processing in the circumstances provided by the GDPR, for example while disputed accuracy is checked.

5.5. Withdrawal of consent

Where processing relies on consent, you may withdraw it at any time. This does not affect earlier lawful processing or separate processing with an independent legal basis.

5.6. Portability

Where processing relies on consent or a contract and is automated, you may receive the data supplied in a structured, commonly used, machine-readable format and transfer it to another controller. You may request direct transmission where technically feasible.

5.7. Objection

You may object to legitimate-interest processing on grounds relating to your situation. Processing will stop unless compelling legitimate grounds prevail or data is needed to establish, exercise or defend legal claims.

5.8. Requests and complaints

Send your request to info@om-arquitectura.studio or Calle Hostal 18, 03725 Teulada, stating the right you wish to exercise. An identity document copy is not routinely required: if reasonable doubts arise, only information necessary to verify identity will be requested.

Requests are normally answered within one month. Where legally permitted, this may be extended by two further months, with notice and reasons within the first month. Exercising rights is free, subject to statutory exceptions for manifestly unfounded or excessive requests.

You may complain to the Spanish Data Protection Agency (AEPD) if you believe your rights have been infringed.

VI. Security and confidentiality

Processing must use technical and organisational measures appropriate to the risk, protecting confidentiality, integrity and availability and preventing unauthorised access, loss or alteration. Access must be limited to those who need the information for the stated purposes.

VII. Updates

This policy will be updated when processing or applicable duties change. The date at the top identifies the published version. Changes requiring specific notice will be communicated accordingly and will not replace obtaining consent where needed.