Privacy notice
1. Controller
Bauhelden Tenerife S.L., C. Siempreviva 64, 38107 Santa Cruz de Tenerife, Spain, NIF B44653244; info@bauhelden.es, +34 648 830 424.
2. Website operation
This website runs on our own Node server. Access involves processing technically necessary connection data such as IP address, time, requested URL, browser information and status messages. This supports delivery, troubleshooting and security on the basis of legitimate interests under Article 6(1)(f) GDPR. Technical logs must be limited to what is necessary and deleted when their purpose no longer applies.
3. Enquiries and email
We process the names, contact details, project selection, location and message you provide to answer your enquiry and, where relevant, take steps towards a contract under Article 6(1)(b) GDPR. Other relevant correspondence may rely on Article 6(1)(f) GDPR. Requests are stored locally on the server; email notifications are sent through SMTP. Hosting and email providers receive only data necessary for their role and must be bound by processor agreements where required. Required fields are needed to handle the enquiry; without sufficient contact information we cannot reply. Please avoid unnecessary sensitive data.
4. Retention
Deletion periods are configurable. Current settings specify 180 days for enquiries and 90 days for configurable analytics retention. Enquiries no longer needed must be deleted after the configured period unless ongoing handling, legal retention duties or legitimate claims require longer storage. Contract and invoice records are subject to separate statutory periods. External services also apply their own settings and requirements; a local retention setting alone does not delete data held by those providers.
5. Consent and external services
Necessary functions, including storing your privacy choices, support website operation. Google Analytics 4 is used only with analytics consent; Google Ads and Meta Pixel only with marketing consent. YouTube embeds load only with external-media consent. Associated scripts, pixels, embeds and connections must remain blocked beforehand. Optional processing relies on Article 6(1)(a) GDPR and, where applicable, Spanish LSSI consent requirements for access to terminal equipment. Empty service IDs mean the relevant tracking services are not configured.
Once enabled, Google services (Google Ireland Limited), Meta services (Meta Platforms Ireland Limited) and YouTube (Google) may process IP addresses, device details, page views, interactions and identifiers. Analytics measures website use; Ads and Meta measure advertising and may support audience creation. Transfers to third countries, particularly the United States, may occur. Where required, appropriate safeguards must apply, such as an applicable adequacy decision or standard contractual clauses. The enabled providers’ privacy notices provide further details. Change or withdraw consent at any time in the footer; withdrawal does not affect earlier lawful processing.
6. Phone and WhatsApp
Phone, email and WhatsApp links open the communication service you choose. Using WhatsApp also involves processing by the WhatsApp service under its own privacy terms. Phone and email are available as alternatives.
7. Your rights
Subject to legal conditions, you have rights of access, rectification, erasure, restriction, portability and objection to processing based on legitimate interests. You may withdraw consent for the future at any time. Contact info@bauhelden.es. You may complain to Spain’s supervisory authority, the Agencia Española de Protección de Datos (AEPD), at www.aepd.es. We do not make solely automated decisions producing legal or similarly significant effects.
8. Publication note
This draft describes the intended technical setup. Before publication, verify and, where necessary, specify the actual infrastructure and SMTP providers, log retention periods, enabled service configurations and grounds for international transfers.