Privacy policy
Last updated: 30 September 2026
Data controller
- Registered name: Obras & Contratas Patrimonial, S.L.
- Spanish tax ID (CIF): B64351216
- Registered address: C/ de Lepant, 286-288, 08013 Barcelona
- Phone: +34 93 531 64 31
- Email: gestion@obraspatrimonial.es
- Trading name: Patrimonial Obras Barcelona
- Commercial registry entry: Registro Mercantil de Barcelona, tomo 45692, folio 51, hoja B-339722
You can contact us through any of these channels about anything concerning your personal data.
What data we process
We only process the data you voluntarily provide through the contact form, plus the minimum technical data generated by the submission itself:
- Data you provide: name, email address, phone number (optional), service of interest and the content of your message.
- Technical data of the submission: IP address, browser identifier (user agent), the page the form was sent from, and the date and time.
Data we do not collect
We do not process special categories of data (health, beliefs, trade union membership and the like), and we ask you not to include any in your message.
We use no analytics or advertising cookies, so we do not build profiles or track your browsing across the site.
What we use it for
- To handle your enquiry or quotation request and get in touch with you about it.
- To keep an internal record of the enquiries received so we can follow up on them.
- To protect the form against automated submissions and abuse, which is what the technical data is used for.
We do not use your data to send you marketing messages or newsletters, and we do not share it with third parties for advertising purposes. Should we want to in the future, we would ask for your specific, separate consent first.
Legal basis
- Your consent (art. 6(1)(a) GDPR), given when you tick the acceptance box and submit the form. You may withdraw it at any time.
- Our legitimate interest in the security of the site (art. 6(1)(f) GDPR), for the technical data of the submission.
How long we keep it
- If your enquiry does not lead to a contractual relationship: 12 months from the last contact, after which it is deleted.
- If a quotation or contract is signed: for the duration of the relationship and afterwards for the period required by commercial and tax law (up to 6 years).
- Technical data of the submission: 12 months.
Who else can access your data
We do not sell or share your data. In order to operate, the website relies on technology providers acting as data processors, solely on our instructions and under a signed processing agreement:
- Vercel Inc. (United States): website hosting and storage of the enquiries received.
- Resend (United States): sending the internal email notification when an enquiry comes in.
International transfers
The providers above are established in the United States, so processing may involve an international transfer of data. These transfers rely on the safeguards set out in Chapter V GDPR: adherence to the EU-U.S. Data Privacy Framework or standard contractual clauses approved by the European Commission, depending on the provider.
Your rights
You may exercise the following rights over your data at any time:
- Access: find out what data we hold about you.
- Rectification: correct inaccurate data.
- Erasure: ask us to delete it.
- Restriction and objection: ask us to stop processing it in certain cases.
- Portability: receive it in a reusable format.
- Withdrawal of consent, without affecting the lawfulness of processing carried out beforehand.
How to exercise them
Write to us at gestion@obraspatrimonial.es stating the right you wish to exercise. We may ask you to prove your identity. We will reply within one month at the latest.
If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency.
Security
We apply technical and organisational measures to protect your data: encrypted communications over HTTPS, access to the enquiry records restricted to authorised staff by password, and collection limited to the minimum data needed to assist you.
Third-party content and cookies
This site uses no analytics or advertising cookies. The technical cookies it does use, and the external content it embeds (Google and CARTO maps), are detailed in the legal notice.
Changes to this policy
If we change the way we process your data we will update this document and its last-updated date. We recommend reviewing it before sending us a new form.