Last updated: 24 September 2026
1. Controller
- Controller
- Q1 DEKOR
- NIF/CIF/NIE
- [Complete from the Spanish business record]
- Address
- [Complete from the Spanish business record]
- Privacy email
2. Data we process
The contact form can collect your name, email address, optional phone number, town or postcode, requested service, job description and technical information needed for security, fraud prevention and form delivery.
Do not send special-category personal data, identity documents, financial details or unnecessary information about third parties.
3. Purposes and legal bases
Enquiries and quotes
We use your details to review the request, communicate with you, arrange a visit and prepare the steps before a possible contract. The legal basis is pre-contractual steps requested by you; responding to general enquiries may be based on our legitimate interest.
Security and spam prevention
The form uses Akismet to identify automated or abusive submissions. Our legitimate interest is protecting the site and inbox from spam.
Aggregated site measurement
We use Plausible Analytics for aggregate usage trends. In its standard setup Plausible does not use cookies or persistent identifiers.
Legal obligations and claims
Where a contract or obligation applies, we may retain the information required for billing, accounting, compliance and legal claims.
4. Providers and recipients
We do not sell personal data. Hosting and maintenance, email, Akismet and professional advisers may process information where necessary, under applicable safeguards. Authorities may receive data where required by law. Where a provider processes data outside the EEA, applicable safeguards such as adequacy decisions or standard contractual clauses will be used where required.
5. Retention
Enquiries are kept for the time needed to respond, follow up and establish whether a commercial relationship will begin. If work is agreed, relevant information is kept for statutory periods and while liabilities may arise. Akismet check records are automatically deleted after 30 days under the plugin’s default setting; update this notice if that setting changes.
6. Required fields
Asterisk-marked fields are needed to process your request. Phone and town are optional, though they can help arrange a visit.
7. Your rights
You may request access, correction, deletion, restriction, objection and, where applicable, portability. You may withdraw consent where it applies without affecting earlier lawful processing. Write to and specify your request. Do not send a full identity document unless it is genuinely necessary and requested securely. You may complain to the Spanish Data Protection Agency (AEPD).
8. Children
This site and its services are not aimed at children. We do not knowingly collect children’s data via the contact form.
9. Security
We take reasonable measures against loss, unauthorised access, alteration or disclosure. No internet-connected system can guarantee complete security; please avoid sending unnecessary sensitive information.
10. Changes
We may revise this policy when the form, suppliers, purposes or law changes. The date of the current version appears above.