Data controller
The controller is Zinddin Boulourhmane Louza, owner of Webs del Camp. Tax identification number (NIF): 79216950-M. Address for privacy matters: Carrer Joan Serra i Vilaró 7, 43007 Tarragona, Spain. Telephone: 611 715 657. Email: drets@websdelcamp.cat.
Data we process
We process the information you provide when booking a meeting or contacting us through our published channels: your name, email address and project details and, for a booking, its date, time and time zone. If you arrive from a package or the calculator, your selection may be added to the booking notes. With your consent to Google Analytics, measurement may include the page visited, traffic source, UTM tags, device type, country and usage interactions. We do not send Analytics contact details, messages, calculator configurations, notes, URL fragments or query parameters other than the permitted UTM parameters.
Purposes and lawful bases
We use your data to respond to your request, assess your project, prepare a proposal or take other steps you request before entering into a contract. The lawful basis is taking steps at the data subject’s request prior to entering into a contract. If you become a client, we process your data to perform and administer the service and meet legal obligations. With your consent only, Google Analytics helps us understand aggregate use, traffic sources, campaigns and paths leading to contact, so we can maintain and improve the website. Abuse prevention and website security rely on our legitimate interest in providing a secure channel. Meeting bookings and enquiries are not used to sign you up for marketing.
Required information
Your name, email address and a brief project description are needed to prepare the meeting. You choose its date and time in the calendar. Please do not include particularly sensitive data in the notes.
Meeting bookings
Cal.com provides the embedded booking calendar. When you open the contact page, your browser connects to Cal.com to show availability and allow bookings. A booking collects your name, email address, project description, date, time and time zone. If you arrive from a package or the calculator, your selection is added to the booking text. Google Calendar records the appointment and checks for scheduling conflicts; Google Meet provides the video call. We use this information to organise and prepare your requested meeting. Displaying the calendar does not authorise Google Analytics. You can also use the published email address, phone number or WhatsApp contact.
Website audit tool
The tool at diagnosticador.websdelcamp.cat analyses the website address you provide and produces a report you can view, share and download.
Data we process. The analysed address, the resulting report and screenshots of that website. To limit abuse, we calculate a one-way cryptographic hash of your IP address. The address cannot be recovered from it, and the hash is deleted after two hours.
Purpose and lawful basis. We generate and store the report to keep your shared link working. Our lawful basis is our legitimate interest in providing the service you request and keeping it secure.
Providers involved. The website is hosted on ChatGPT Sites (OpenAI), running on Cloudflare, where reports and screenshots are stored. The analysed address is sent to Google’s PageSpeed Insights API to measure speed. Some checks use a remote Cloudflare browser. These providers may process data outside the European Economic Area under the safeguards set out in their terms.
Retention. Reports and screenshots are kept for twelve months from creation. The IP hash is kept for two hours.
Your rights. In addition to the rights set out in this policy, you can request deletion of a specific report by emailing its link to drets@websdelcamp.cat.
Recipients and providers
We do not sell your data. Cal.com handles bookings; Google Calendar and Google Meet handle the appointment and video call. Google also provides Analytics and the interactive map when you authorise them. Enquiries received before the form was removed may have been sent through Resend and stored in HubSpot for sales management. Hosting providers and the contact channels you use are also involved. Information may be disclosed where legally required. For the website audit tool, ChatGPT Sites (OpenAI) and Cloudflare provide hosting, and Google provides speed measurement.
External content and international transfers
Optional external interactive content, such as the map, stays blocked until you accept it. The functional booking calendar connects to Cal.com when you open the contact page. These providers may receive technical data, including your IP address, and use storage under their terms. Cal.com states that it processes data in the United States and uses the EU–US Data Privacy Framework and standard contractual clauses where applicable. Its policy is available at https://cal.com/privacy. Rejecting optional services does not prevent use of the calendar or the rest of the website.
Retention
Enquiries that do not lead to a contract are kept for no more than twelve months after the last communication, unless they need to be retained longer to address a claim. Client data is kept during the relationship and subsequently restricted from use for the applicable statutory periods. Google Analytics retains user and event data for fourteen months; aggregate reports may remain available longer. Website audit reports are kept for twelve months.
Your rights
Where applicable, you may request access, rectification, erasure, restriction of processing or data portability, and object to processing. You may withdraw consent without affecting earlier processing. Send your request to drets@websdelcamp.cat or the address above, stating which right you wish to exercise. We may request reasonable information to verify your identity. You may also lodge a complaint with the Spanish Data Protection Agency.
Automated decision-making
We do not make decisions with legal effects based solely on automated processing. The calculator applies pricing rules to your selected options, but does not decide whether we accept a project or enter into a contract.
Security and updates
We apply technical and organisational measures proportionate to the type of information processed. This policy will be reviewed when contact channels, providers, purposes or applicable rules change. The current version date appears at the start.