Data protection

Privacy policy

Last updated: 14 August 2026

1. Data controller

The controller is José Maria Gonzalez Lamela, NIF 18225435M, Carrer d’en Jordi Bosch 17 A and B, 07650 Santanyí, Illes Balears, Spain. You can contact us at info@pepmariaelectricidad.com or on +34 610 601 961.

2. Data, purposes and legal bases

Enquiries and projects

We process information provided through forms, by telephone, email or WhatsApp in order to respond, assess a project, prepare a proposal and maintain the communications you request. The legal basis is your consent and, where relevant, taking pre-contractual steps at your request.

Reviews

We process name, email, rating and comment in order to verify, moderate and manage a review. Name, rating and comment are published only when separate express consent has been given. The email remains private and is retained to evidence consent, handle queries and respond to removal requests.

Optional analytics

If you consent, we record the page visited, date, language, general source and device type. We also assign the browser a random identifier, which is converted into a pseudonymous reference before it is stored. It is used solely to distinguish visitors and sessions in aggregate statistics. We do not store IP addresses or advertising identifiers and do not build profiles. The legal basis is your consent, which you can withdraw through the “Privacy” control.

Private administration

Authorised accounts are used to control access to review moderation and analytics. The legal basis is our legitimate interest in protecting the administration area and the data held there.

3. Retention

Enquiries: while they are being handled and for the periods required to address potential liabilities.
Project and client data: for the duration of the relationship and the applicable legal, tax or contractual periods.
Reviews: while they remain published; evidence of consent may then be placed under restricted retention for the applicable legal periods.
Analytics: detailed records will be retained for no more than 13 months.
Privacy preferences: 6 months unless you change them earlier.

4. Recipients and service providers

We do not sell personal information. Providers required for hosting, email, security, support or management may access it where necessary, subject to contractual confidentiality and data-protection obligations. Where a provider makes an international transfer, a valid GDPR safeguard will be used, such as an adequacy decision or standard contractual clauses.

5. Your rights

You may request access, rectification, erasure, objection, restriction, portability or withdrawal of consent by writing to info@pepmariaelectricidad.com. Withdrawal does not affect processing carried out previously. You may also lodge a complaint with the Spanish Data Protection Agency at www.aepd.es.

6. Security and children

We apply proportionate measures to prevent unauthorised access, alteration or loss. The forms are not intended for children under 14. If we identify a child’s data submitted without authorisation, we will delete it.