Privacy policy
Last updated: 15 October 2026
This is an informative translation. In case of discrepancy, the Spanish version prevails.
1. Who is the data controller?
Mario Amadeo Muñoz Castellano (dbricks), tax ID 75148161P, Camino de San Antonio, nº 9, 27, 18011 Granada (Spain). Privacy contact: contact@dbricks.es.
2. What data do we process and why?
- To answer your enquiry or quote request: name, email, phone (optional), type of service and message. Legal basis: your consent and pre-contractual steps (GDPR art. 6.1.a and 6.1.b). Kept until your request is resolved and, at most, 1 year if we do not work together.
- To answer emails and calls you send us directly: name, email or phone and the content of your enquiry. Legal basis: your consent when you contact us and, if you ask for a quote, pre-contractual steps (art. 6.1.a and 6.1.b). Same retention as above.
- To serve the website securely: technical connection data (IP address, date and time, requested page and browser). Legal basis: legitimate interest in keeping the website available and secure (art. 6.1.f). Kept only as long as needed to deliver the page and protect the service; our provider does not generate viewable access logs for static websites like this one.
- Business prospecting (identifying companies and professionals that may need our services and contacting them): trade name, address, phone, generic email and website published by the business itself. Source: public sources (OpenStreetMap and each business's own website); we discard emails of specific individuals. Legal basis: legitimate interest in making our services known (art. 6.1.f). Kept for up to 1 year or until you object. We do not send commercial emails to anyone who has not requested or authorised them beforehand (art. 21 of Spanish Law 34/2002). To object, email us and we will delete your data.
- To provide the services you hire: identification, contact and billing data. Legal basis: performance of the contract (art. 6.1.b). Kept for the duration of the relationship and the legal limitation periods.
- To meet tax and accounting obligations: billing data. Legal basis: legal obligation (art. 6.1.c). Kept for the periods required by law.
The contact form is hosted on Google Forms and only loads if you click "Load the form". Responses are stored in a Google spreadsheet, in an account of the data controller that only he can access. When we receive your request, we automatically send you a confirmation email. The fields marked as required are needed to reply to you: without them we cannot handle your request that way, but you can always email or call us. We do not make automated decisions or build profiles with your data.
3. Who receives your data?
We do not share your data with third parties unless required by law. We use providers acting as data processors under contract:
- Render (Render Services, Inc., United States: website hosting). It serves the website through a content delivery network with servers in several countries and processes data mainly in the United States, with the safeguards of its data processing addendum: it is certified under the EU-US Data Privacy Framework and includes the European Commission's standard contractual clauses.
- Microsoft 365, through GoDaddy (business email).
- n8n Cloud (n8n GmbH, Germany: automation that processes form requests, notifies us and sends your confirmation email). It hosts data in the European Union, on Microsoft Azure, and its data processing agreement is part of its terms of service.
Where a provider processes data outside the European Economic Area, it does so with the safeguards required by the GDPR, such as adequacy decisions or standard contractual clauses.
The contact form runs on Google Forms and Google Sheets, provided through the data controller's personal Google account. In this case, Google (Google Ireland Limited in the European Economic Area) processes the data under its own terms and privacy policy, and may transfer it to Google LLC (United States), which is certified under the EU-US Data Privacy Framework. If you prefer not to use Google, you can email or call us instead.
4. What are your rights?
You can access, rectify or erase your data, object to or restrict its processing, request portability and withdraw your consent at any time by writing to contact@dbricks.es. You can also lodge a complaint with the Spanish Data Protection Agency (AEPD).