WEBSITE PRIVACY POLICY

I. DATA CONTROLLER

The controller of personal data is OBRES VORA MAR 2000 SL, holding NIF B17659798, registered in the Mercantile Registry of Girona with the following registration data: Volume 1639, Book 0, Folio 116, Section 8, Sheet GI 27091. Its representative is JOSEP SERRANO JUSCAFRESA.

Address: Carrer de la Creu Roquinyola, 84, 17200 Palafrugell, Girona, Spain

Telephone: 972303925

Email: consvoramar@gmail.com

This policy complies with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD), and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).

II. WHAT WE COLLECT ON THIS WEBSITE

This website has no forms. There is no user registration, no newsletter subscription, no contact form and no comment system. While you browse our pages we do not ask you for any personal data.

We do count visits and clicks on the call and email buttons, with a statistics tool that uses no cookies. We explain this in section IV. There is no Google Analytics, no tracking pixels and no advertising or profiling services.

Personal data is processed only in the four cases described below: when you connect to the server, when we count your visit, when you write to or call us, and when you choose to load the map on the contact page.

III. CONNECTION DATA AND HOSTING

The website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, United States. Like any web server, in delivering the pages to you it records technical connection data: IP address, date and time, page requested, browser type and operating system.

This data is processed in order to provide the service, maintain the security of the site and detect incidents or abusive use. The legal basis is the controller's legitimate interest (Article 6(1)(f) GDPR) in keeping the website operational and secure.

Cloudflare, Inc. acts as a data processor. As it is established in the United States, this processing involves an international data transfer. Cloudflare is certified under the EU-U.S. Data Privacy Framework, which the European Commission considers an adequate safeguard. Should that certification cease to apply, the transfer would be covered by the standard contractual clauses approved by the European Commission.

IV. VISIT STATISTICS

We count how many people visit the website and how many times the call and email buttons are pressed. We do this with Umami, a web statistics program.

Umami is run by 2P Digital Agency, our web analytics provider, which acts as a data processor. The data is stored on an OVH server in France, within the European Union.

For each visit the following is stored: the page visited, the page you came from, the date and time, the language, the browser type, the operating system, the device type, the screen size, and the country, region and city. When you press call or email, the click and the place on the page where you pressed it are also stored.

Your IP address is not stored. It is only used at the moment of the visit to work out the country, region and city, and to calculate a session identifier that changes every month.

Umami uses no cookies and stores nothing in your browser. It loads on every page.

The purpose is to know whether the website works: how many people visit, where they come from and whether they find how to contact us. The legal basis is the controller's legitimate interest (Article 6(1)(f) GDPR) in knowing these figures, which are always looked at in aggregate. You can object by writing to us, as explained in section IX.

The detail of each visit is kept for 24 months and then deleted automatically. We only keep monthly totals (number of visits, most viewed pages, where visitors come from and from which countries), which cannot identify anyone, for as long as 2P Digital Agency runs the website.

V. IF YOU WRITE TO OR CALL US

If you send us an email or call us, we will process the data you provide (name, email address, telephone number and the content of your message) for the sole purpose of answering your enquiry and, where applicable, preparing or managing a quote or a job.

The legal basis is the application of pre-contractual measures at your request and the performance of any resulting contract (Article 6(1)(b) GDPR). We will keep the correspondence for the duration of the relationship and thereafter for the applicable statutory limitation periods.

Our email address, consvoramar@gmail.com, is a Gmail account. This means that Google Ireland Limited, with registered office at Gordon House, Barrow Street, Dublin 4, Ireland, processes the messages you send us in its capacity as email service provider.

VI. STORAGE IN YOUR BROWSER

This website stores nothing in your browser: no cookies and no local storage. Nor does the visit counter.

Nor does it remember whether you have loaded the map on the contact page. On every visit you will see the button again.

Only Google can set cookies in your browser, and only if you load the map. We explain this in section VII.

VII. THE MAP ON THE CONTACT PAGE

The contact page includes a Google Maps map which, by default, does not load. In its place there is a button you must press explicitly.

If you load it, your browser connects directly to Google's servers, which will receive your IP address and may set their own cookies in accordance with their privacy policy. In this case the controller for the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for this loading is your consent (Article 6(1)(a) GDPR), which you give by pressing the button. It applies to that visit only: next time you will see the button again. To delete any cookies Google has set, clear the data for google.com in your browser. If you do not load it, the website works entirely as normal.

VIII. RECIPIENTS OF THE DATA

We do not transfer or sell personal data to third parties, nor do we use it for commercial, marketing or profiling purposes.

The only third parties involved are the technology providers already mentioned: Cloudflare, Inc. as hosting provider, 2P Digital Agency as web analytics provider, and Google Ireland Limited as email provider and, only if you load it yourself, as map provider.

It may also be necessary to disclose data to public authorities and the courts where a legal obligation so requires.

IX. YOUR RIGHTS

You may exercise the following rights against the data controller:

Right of access: to obtain confirmation as to whether we are processing your personal data and, if so, to access it.

Right to rectification: to have inaccurate or incomplete data corrected.

Right to erasure: to obtain the deletion of your data when it is no longer necessary.

Right to restriction of processing: to request that processing be restricted in certain circumstances.

Right to data portability: to receive your data in a structured format and transmit it to another controller.

Right to object: to object to the processing of your data.

Right to withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.

To exercise them, write to us quoting the reference "RGPD-obresvoramar.com" at:

Postal address: Carrer de la Creu Roquinyola, 84, 17200 Palafrugell, Girona, Spain

Email: consvoramar@gmail.com

X. DATA SECURITY

We apply technical and organisational measures appropriate to the risk of the processing. The website is served entirely over HTTPS with an SSL certificate, so communication between your browser and the server travels encrypted.

Should a personal data breach occur that is likely to result in a high risk to your rights and freedoms, we would notify you without undue delay, as required by Article 34 GDPR.

XI. MINORS

This website is not specifically directed at minors and does not actively collect data. Under Article 7 of Spanish Organic Law 3/2018, minors under 14 require the consent of their parents or guardians for the processing of their personal data.

XII. LINKS TO THIRD-PARTY WEBSITES

The website contains links to third-party pages, such as the company's Instagram profile. The owners of those sites have their own privacy policies, over which we have no control.

XIII. COMPLAINTS TO THE SUPERVISORY AUTHORITY

If you consider that the processing of your personal data infringes applicable law, you may lodge a complaint with the Spanish Data Protection Agency (https://www.aepd.es/).

XIV. CHANGES TO THIS POLICY

We reserve the right to amend this privacy policy to adapt it to legislative developments or to changes in how the website operates. We recommend that you consult it periodically.

This privacy policy was last updated on 26/09/2026.