Privacy policy

This English version is provided for your convenience. In case of any discrepancy, the Spanish version prevails.

At La Imprenta, we only ask you for the data we need to help you. Here we explain who processes it, why, on what legal basis, for how long and what rights you have, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

Data controller

Controller: [PENDIENTE: razón social] (La Imprenta)
Tax ID (CIF): [PENDIENTE: CIF]
Address: C/ Majadahonda Nº 9, 28925 Alcorcón (Madrid)
Phone: 910 391 673
Email: laimprenta@laimprenta.org
Data protection officer (DPO): [PENDIENTE: delegado de protección de datos (si lo hay)]

What data we process and why

Quote request form

Purpose: to reply to your request and prepare your quote.
Data: name, email address, phone number, type of customer (business or individual), product, quantity, whether it is urgent, the date you need it by, message and, if you add them, files or a link to them.

File submission form

Purpose: to receive your files so that we can prepare your job.
Data: name, email address, phone number, job reference, files, link to files and comments.

Contact form

Purpose: to answer your enquiry.
Data: name, email address, phone number, type of contact (business, individual or supplier) and message.

In all three forms, fields marked with an asterisk are required: without them, we cannot help you. The data you give us must be true and up to date.

Email notifications

When you submit any of the forms:

Your submission is stored on the website so that we can deal with it.
We receive an email notification at laimprenta@laimprenta.org with the form data, so that we can reply to you directly.
We send you an email confirming that we have received your request.

These emails have the same purpose as the form they come from.

Email, phone and WhatsApp

If you write to us or call us directly, we use the data you give us to deal with your enquiry or your order. [PENDIENTE: número de WhatsApp; si se publica, informar aquí de que WhatsApp trata los mensajes según su propia política de privacidad]

Technical data

As with any website, the server logs technical data about visits (such as the IP address, the date and time, and the page requested) for the operation and security of the website. [PENDIENTE: confirmar con el proveedor de alojamiento qué datos registra y durante cuánto tiempo] [PENDIENTE: confirmar si el gestor de formularios guarda la dirección IP de cada envío]

We do not use analytics or advertising tools, we do not carry out profiling and we do not make automated decisions based on your data. We only use it for the purposes described: we will not send you advertising.

Google map

On some pages (such as Contact), you can see our location on a map from Google Maps. The map does not load when you open the page: it only loads if you press the “Load Google map” button.

When you press it, your browser connects to Google, which receives your IP address and may use cookies. Google processes this data as a controller, in accordance with its privacy policy, and may do so outside the European Economic Area. We do not receive any data from your use of the map. You can find more information in our Cookie policy.

Legal basis for processing

Quote requests: taking steps at your request prior to entering into a contract (Article 6.1.b GDPR): you ask us for a quote and we need your data to prepare it.
File submissions: performing the order you place with us or, if you have not confirmed it yet, taking steps at your request prior to entering into a contract (Article 6.1.b GDPR).
Contact and enquiries by email or phone: your consent (Article 6.1.a GDPR).
Notifications and confirmation emails: the same basis as the form they come from.
Technical server data: our legitimate interest in keeping the website running and protecting it against misuse (Article 6.1.f GDPR).

In addition, in all three forms you give us your consent by ticking the privacy box (Article 6.1.a GDPR). You can withdraw it at any time by emailing us at laimprenta@laimprenta.org, without affecting the lawfulness of any processing carried out before you withdraw it.

How long we keep your data

Quote requests, file submissions and enquiries (including email notifications): for as long as needed to deal with them and, after that, [PENDIENTE: plazo de conservación].
If your request becomes an order: for as long as our business relationship lasts and, after that, for the periods required by law (for example, commercial and tax law). [PENDIENTE: plazo de conservación de los datos de clientes]
Files you send us: see the “Files you send us” section.

When the data is no longer needed, it is kept blocked solely to deal with any possible legal liabilities until the relevant limitation period expires, and is then erased (Article 32 LOPDGDD).

Recipients

We do not disclose your data to third parties unless we are legally required to (for example, to the Spanish Tax Agency, the courts or law enforcement authorities when they require it).

To provide our service, we use suppliers who process data on our behalf as processors: they may only use it to provide that service to us and are contractually bound to protect it (Article 28 GDPR).

Website hosting: [PENDIENTE: proveedor de alojamiento]
Email: [PENDIENTE: proveedor de correo electrónico]
Backups: [PENDIENTE: proveedor de copias de seguridad, si se guardan fuera del alojamiento]

If you send us a link to a file transfer service (such as WeTransfer or Google Drive), you choose that service, and it processes your data under its own terms.

International transfers

We do not plan to transfer your data outside the European Economic Area. [PENDIENTE: confirmar con los proveedores de alojamiento, correo electrónico y copias de seguridad]

If you choose to load the Google map, the connection is made directly between your browser and Google (see the “Google map” section).

Your rights

You can exercise the following rights at any time:

Access: to find out whether we process your data and to obtain a copy of it.
Rectification: to correct inaccurate or incomplete data.
Erasure: to ask us to delete your data, for example when it is no longer needed.
Objection: to object to our processing of your data on grounds relating to your particular situation.
Restriction of processing: to ask us only to store your data, for example while we check whether it is accurate.
Data portability: to receive the data you gave us in a structured, commonly used format, or to have us send it to another controller, where the processing is based on your consent or on a contract and is carried out by automated means.
Withdraw your consent, without affecting the lawfulness of any processing carried out before you withdraw it.

How to exercise your rights

Email us at laimprenta@laimprenta.org with the subject line “Data protection”, or write to us by post at C/ Majadahonda Nº 9, 28925 Alcorcón (Madrid). Tell us which right you wish to exercise and give us the details we need to identify you; if we have reasonable doubts about your identity, we may ask you for additional information.

It is free of charge. We will reply within one month, which may be extended by a further two months if the request is complex or there are many requests (Article 12.3 GDPR).

Lodging a complaint with the AEPD

If you believe that we have not handled your request properly or that we are processing your data improperly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es. If you prefer, you can write to us first so that we can try to resolve it.

Files you send us

The files you attach to the quote request and file submission forms (up to 10 MB each) are stored on the website’s server together with your submission and, where applicable, in the email notification we receive.
They can only be accessed by the La Imprenta staff preparing your quote or your job. We do not publish or share them, except with the processors listed above.
Deletion period: [PENDIENTE: plazo de borrado de los archivos recibidos]
If your files include other people’s personal data (for example, names and phone numbers on business cards or invitations), you must have their permission to give it to us. We will only use it to print your order.
We recommend that you do not include any personal data that is not needed for the job.

Security measures

We apply technical and organisational measures appropriate to the risk to protect your data against loss, alteration and unauthorised access (Article 32 GDPR), including:

An encrypted connection (HTTPS) across the whole website, including when you submit the forms.
Access to submissions and files restricted to authorised staff, with a username and password.
Regular security updates and backups.
Forms that do not load any third-party services (we do not use reCAPTCHA or similar systems).

Minors

The forms are not intended for children under 14. If you are under 14, you need permission from your mother, father or legal guardian to send us your data (Article 7 LOPDGDD). If we find that data from a child under 14 has been sent without that permission, we will delete it.

Changes to this policy

We may update this policy, for example if our suppliers or the law change. We will always publish the current version here, with its date.

Last updated: [PENDIENTE: fecha de publicación]