Privacy policy - Terraza Living
How Terraza Living processes personal data under the GDPR, including cookies and your rights.
Information
Privacy policy
How Terraza Living processes personal data under the GDPR, including cookies and your rights.
Information
Privacy policy
Effective from
Dear user,
This document sets out how personal data is collected, stored and shared by the controller in connection with the Terraza Living website. We take care of the security and confidentiality of your data when you visit the site, send a project enquiry, or contact us in another way. We act in line with applicable law, in particular the GDPR.
to be completed
Controller
Address
Tax ID
I. Who is the controller of your personal data?
The controller of personal data for the Site (the Controller), i.e. the party responsible for the security of your data, is:
You can contact the Controller using the details above. If you have comments or questions about this policy, please write to the Controller.
II. How do we obtain your personal data?
When using the Site you may be asked for personal data - in particular through the enquiry form (name, email, phone, town or city, project information, message and optionally site photos). Providing data is voluntary, but in some cases it is necessary for us to reply.
Some data is collected automatically when you visit the Site (e.g. IP address, browser type, operating system, server logs). It is used to run the site, for security and - if you consent - for analytics.
III. For what purpose, on what legal basis and for how long do we process your data?
We process data only as long as needed for the purposes above, unless you submit a valid request for erasure.
Responding to an enquiry and steps prior to a contract
Basis: Art. 6(1)(b) GDPR. Form and correspondence data are processed until the project conversation ends, and for one further year.
Compliance with legal obligations
Basis: Art. 6(1)(c) GDPR (e.g. accounting records if a collaboration follows). Retention follows the law, including tax limitation periods.
Establishing, pursuing and defending claims
Basis: Art. 6(1)(f) GDPR (legitimate interest). For the duration of the relationship and until claims become time-barred.
Proper operation of the Site
Basis: Art. 6(1)(f) GDPR. Until a valid objection or until the purpose is achieved (including server logs and necessary cookies).
Replies to questions by phone or email
Basis: Art. 6(1)(f) GDPR. Until claims become time-barred.
Marketing (news about Terraza Living projects)
Basis: Art. 6(1)(a) GDPR (consent). Until you withdraw consent. It is voluntary and independent of handling the enquiry.
IV. Who may receive your personal data?
Where needed for the processing purposes, we use external providers. Recipients may include:
hosting, email and IT service providers,
parties supporting enquiry handling (if sharing data is necessary),
other entities whose request is based on applicable law.
V. Do we transfer personal data to third countries?
As a rule we do not transfer personal data outside the European Union and the European Economic Area (EEA). The Site uses Google Fonts and, on the contact page, embedded Google Maps and a YouTube video, which may involve technical processing (e.g. IP address) by Google, including on servers outside the EEA.
If we later enable analytics or marketing tools after your cookie consent, their providers may also process data outside the EEA using GDPR transfer tools (including standard contractual clauses).
VI. Do we use cookies?
The Site uses cookies (short pieces of information stored on your device) and similar technologies (e.g. localStorage to remember your consent choice).
Necessary cookies run the Site and remember your consent. Optional (analytics) cookies are switched on only with your permission. You can change your choice at any time in the cookie settings on the Site or in your browser. Blocking cookies may make the Site harder to use.
VII. How do we protect your data?
The Controller applies technical and organisational measures in line with the GDPR, including:
TLS encryption of the connection where available,
access to data limited to authorised persons,
minimising the scope of data processed,
regular risk review and updates to safeguards.
VIII. What rights do you have regarding your data?
Under applicable law you have the right to:
access to your data, including a copy,
rectification or completion,
erasure (“right to be forgotten”),
restriction of processing,
withdrawal of consent (where consent is the basis),
data portability,
lodge a complaint with a data protection authority.
If you ask us to exercise any of these rights, we will respond without undue delay, and no later than 14 days after receiving the request.
Further information on personal data protection is available on the UODO website.
IX. Does using the Site send logs to the server?
Using the Site involves sending requests to the server that hosts the page. Each request may be stored in server logs.
Log data is not linked to specific people for identification, unless this is needed for security or legal duties.
X. Can we change this privacy policy?
This Privacy Policy may be changed. We will announce a material change visibly on the Site.
Changes take effect on the day the updated Policy is published on the Site, unless they affect acquired rights of data subjects.