Privacy Policy

This policy explains what personal data we collect on www.yudi.group and when you contact us, why we need it, the legal basis on which we process it, who we may share it with and what rights you have.

It has been drawn up in accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD) and Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE).

1. Who is responsible for your data

The controller of your personal data is:

• YUDI BUILDING GROUP S.L.U.
• CIF: B72545163
• Registered address: Calle Pepe Osorio 56, planta 1, oficina 3, 29670 San Pedro de Alcántara, Marbella (Málaga), Spain
• Office: Gran Jefe Business Center, Av. Ricardo Soriano 58, 29601 Marbella (Málaga), Spain
• Phone: +34 742 070 695
• Email for data protection matters: yudigroup.es@gmail.com

For any question about your data, please use the contact details above.

2. What data we process

We only process the data we need to answer your enquiry and to work with you:

• data you enter in the forms on our website: your name, phone number with country code and the text of your message;
• data you give us by phone, email or WhatsApp: contact details and information about your enquiry;
• information about your property, if you share it for a consultation or estimate: address and features of the property, plans, photos and your wishes for the project;
• if we sign a contract, the data needed to perform it and to invoice: name or company name, NIE, NIF or passport number, address and bank details;
• technical data about your visit: IP address, browser and device information, pages viewed and actions on the website. This data is collected by analytics and advertising services through cookies, and only with your consent — see our Cookie Policy.

Please do not send us special categories of data, such as information about your health or religious beliefs. We do not need it for our services.

If you give us data about other people, for example a co-owner of the property, you confirm that you have informed them and are entitled to share their data.

3. Why we process your data and on what legal basis

• To answer your enquiry, hold a consultation and prepare a proposal or estimate. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• To enter into and perform a contract for a design project or renovation, and to organise and coordinate the works. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• To keep accounting and tax records and meet other legal requirements. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
• To measure traffic and improve the website with Google Analytics and Microsoft Clarity. Legal basis: your consent (Art. 6(1)(a) GDPR, Art. 22.2 LSSI-CE).
• To show advertising and measure its effectiveness with Google Ads and Meta Pixel. Legal basis: your consent (Art. 6(1)(a) GDPR, Art. 22.2 LSSI-CE).
• To protect the website against misuse and keep it secure. Legal basis: our legitimate interest in protecting the website (Art. 6(1)(f) GDPR).

You can withdraw your consent at any time. This does not affect the lawfulness of processing carried out before you withdraw it.

Your name and phone number are required in the form, as we cannot contact you without them. The message is optional.

We do not take decisions that produce legal effects for you or similarly significantly affect you based solely on automated processing, including profiling.

4. How long we keep your data

• Enquiries that do not lead to a contract: 12 months after our last contact, after which we delete them.
• Client data: for the duration of the contract and afterwards for the periods required by law for keeping records and handling possible claims, for example 6 years for accounting records under Art. 30 of the Spanish Commercial Code.
• Data collected through cookies: for the periods stated in our Cookie Policy.
• Data processed on the basis of consent: until you withdraw your consent.

5. Who we may share your data with

We do not sell personal data. Only the following may have access to it:

• service providers acting on our behalf under a contract with us: our website hosting provider, our email provider (Google), and our accounting and legal advisers;
• analytics and advertising services, only with your consent: Google Ireland Limited (Google Tag Manager, Google Analytics, Google Ads), Meta Platforms Ireland Limited (Meta Pixel) and Microsoft Ireland Operations Limited (Microsoft Clarity);
• Google Ireland Limited, when the embedded map on the contact page is loaded;
• WhatsApp Ireland Limited, if you message us on WhatsApp; in this case WhatsApp’s own terms also apply;
• contractors and suppliers involved in the works under your contract, to the extent necessary for the works, for example the property address and a contact person to arrange access;
• public authorities, courts and tax authorities, where required by law.

6. Transfers outside the European Union

Google, Meta and Microsoft may process data in the United States and other countries outside the European Economic Area. These transfers are based on the European Commission’s adequacy decision (EU-US Data Privacy Framework) for companies certified under it, or on standard contractual clauses approved by the European Commission.

7. Your rights

Regarding your personal data, you have the right to:

• find out whether we process your data and obtain a copy of it;
• have inaccurate or incomplete data corrected;
• have your data erased when it is no longer needed or you withdraw consent;
• restrict processing in the cases provided by law;
• receive your data in a structured, machine-readable format and transmit it to another controller;
• object to processing based on our legitimate interest and to processing for direct marketing;
• withdraw your consent at any time.

To exercise these rights, write to yudigroup.es@gmail.com or send a letter to our registered address, stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask you to confirm it.

We will reply within one month. For complex or numerous requests this period may be extended by two further months; we will let you know in advance.

If you believe we are infringing your rights, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es).

8. Minors

Our services are intended for adults. We do not knowingly collect data from people under 14 (Art. 7 LOPDGDD). If you become aware that such a person has sent us their data, please tell us and we will delete it.

9. Data security

We apply technical and organisational measures to protect data against unauthorised access, loss and alteration. The website uses the secure HTTPS protocol, and only staff who need the data for their work have access to it.

10. Cookies

This website uses cookies and similar technologies. Optional cookies — analytics and advertising — are only set after you give your consent, which you can change or withdraw at any time. See our Cookie Policy for details.

11. Changes to this policy

We may update this policy, for example when the law or the services used on the website change. The current version is always published on this page. We will announce significant changes on the website.