Privacy Policy

1. Data controller

2. Purpose of data processing

Personal data you provide will be processed for the following purposes:

  • Managing enquiries and contact requests submitted through the web form.
  • Sending commercial communications, only with the user's explicit consent.
  • Performing statistical analysis of browsing behaviour (via analytical cookies, subject to consent).
  • Managing the contractual relationship, where applicable.

3. Legal basis for processing

  • Consent (Art. 6(1)(a) GDPR): for commercial communications and analytical cookies.
  • Legitimate interest (Art. 6(1)(f) GDPR): for managing contact enquiries.
  • Performance of a contract (Art. 6(1)(b) GDPR): for providing contracted services.

4. Data recipients

Personal data will not be disclosed to third parties except where required by law. Where third-party services are used (such as hosting providers or analytics tools), they act as data processors under a data processing agreement.

In particular, we may use:

  • Google Analytics (GA4): web traffic analysis. Data may be transferred to Google LLC servers in the US under appropriate safeguards. Only activated with user consent.
  • Hosting provider: for website hosting.

5. Data subject rights

In accordance with the GDPR (EU Regulation 2016/679) and the Spanish LOPDGDD (Organic Law 3/2018), you may exercise the following rights:

  • Access: know what personal data we process.
  • Rectification: request correction of inaccurate data.
  • Erasure: request deletion of your data ("right to be forgotten").
  • Objection: object to the processing of your data.
  • Restriction: request restriction of processing in certain circumstances.
  • Portability: receive your data in a structured, commonly used format.

To exercise these rights, please send an email to contacto@conceptualcreative.com, attaching a copy of your ID document.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

6. Data retention periods

  • Contact enquiries: 12 months from the last communication.
  • Contractual data: for the duration of the contractual relationship and the applicable legal limitation periods thereafter.
  • Analytics data: according to the analytics tool configuration (maximum 14 months in GA4).

7. Cookies

This website uses cookies. For more information, please see our Cookie Policy.

8. Security

Conceptual Creative has adopted the necessary technical and organisational measures to ensure the security of personal data and prevent unauthorised alteration, loss, processing or access, taking into account the state of technology, the nature of the stored data and the risks to which they are exposed.

Last updated: February 2026.