Privacy Policy

Last updated: June 24, 2026

1. Data Controller

Metunspaya ("we", "us") is the data controller responsible for your personal data. We are based in Spain and comply with the General Data Protection Regulation (GDPR — EU 2016/679) and Spain's LOPDGDD (Ley Orgánica 3/2018).

Contact: privacy@metunspaya.com

2. Data We Collect

2.1 Contact Form Submissions

When you submit our contact form, we collect:

• Name — to address you personally.
• Email address — to respond to your inquiry.
• Selected service (optional) — to understand your needs.
• Message content — your inquiry details.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — processing necessary to respond to business inquiries. You can also give explicit consent by submitting the form.

2.2 Technical Data

Our server automatically logs:

• IP address (anonymized after 30 days)
• Browser type and version
• Pages visited and time of access

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — security and service quality.

2.3 Cookies

We use only strictly necessary cookies (cookie consent preference). We do not use analytics, advertising, or third-party tracking cookies. See our Cookie Policy for details.

3. How We Use Your Data

• Respond to your inquiries and provide requested services.
• Send project quotes and follow-up communications.
• Ensure website security and prevent abuse.

We do not sell, rent, or share your data with third parties for marketing purposes.

4. Data Processing & Third Parties

Your contact form submissions are delivered to us via Telegram's Bot API (Telegram FZ-LLC, Dubai). This is a technical transmission channel; Telegram does not store or process your data beyond delivery. We have assessed this transfer under GDPR Art. 28.

5. Data Retention

• Contact form data: Retained for 12 months after last interaction, then deleted.
• Server logs: Anonymized after 30 days, deleted after 90 days.
• Cookies: Cookie consent preference stored for 365 days.

6. Your Rights (GDPR Art. 15–22)

You have the right to:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate data.
• Erasure ("right to be forgotten") — request deletion.
• Restriction — limit how we process your data.
• Portability — receive your data in a structured format.
• Objection — object to processing based on legitimate interest.

To exercise any right, email privacy@metunspaya.com. We will respond within 30 days.

7. Supervisory Authority

You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

8. Security

We use HTTPS encryption, access controls, and secure infrastructure to protect your data. Contact form submissions are transmitted over encrypted channels.

9. Changes

We may update this policy. Changes will be posted on this page with an updated date. Material changes will be notified via a banner on the website.