0%

Building

02Privacy

Privacy policy

What data we process, why, for how long and what rights you have over it, under the GDPR and the Spanish LOPDGDD.

Last updated: 27 de julio de 2026

This is a translation for information only. In the event of any discrepancy, the Spanish version of this document prevails.

1. Data controller

Blocklack S.L., tax ID B44575041, registered at Carrer de la Riera Blanca, 156, 3-1, 08903 L'Hospitalet de Llobregat, España. You can reach us at los@blocklack.com or on +34 611 727 621.

2. Data we process

  • Contact and professional details you give us in the forms: name, job title, company, work email, phone, company size, estimated budget and the description of your project.
  • Communication data: the content of the messages you send us by email or phone.
  • Browsing data: technical and usage information collected through cookies, as described in the cookie policy.

3. Purposes and legal basis

  • Handling your request and preparing a service proposal. Legal basis: pre-contractual measures taken at the request of the data subject (art. 6.1.b GDPR).
  • Managing the contractual relationship if you go on to hire our services. Legal basis: performance of a contract (art. 6.1.b GDPR).
  • Sending you news and offers, only if you tick that box. Legal basis: your consent (art. 6.1.a GDPR), which you can withdraw at any time.
  • Meeting legal obligations in tax, accounting and commercial matters. Legal basis: legal obligation (art. 6.1.c GDPR).

4. Retention periods

Data from enquiries that do not lead to a contract is kept for a maximum of twelve months. Client data is kept for the duration of the contractual relationship and, afterwards, for the applicable statutory limitation periods — up to six years for commercial matters and four for tax matters. Data processed on the basis of your consent is kept until you withdraw it.

5. Recipients

We do not share your data with third parties except where legally required. Providers that serve us as data processors — hosting, email, management tools, CRM and payment gateways — may access it under the contract required by article 28 GDPR.

Where a provider is located outside the European Economic Area, the transfer relies on an adequacy decision or on standard contractual clauses approved by the European Commission.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent given, by writing to los@blocklack.com and stating which right you wish to exercise.

If you believe the processing does not comply with the rules, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).

7. Security

We apply appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including encryption in transit, access control and periodic review of our systems.

8. Accuracy of the data

You warrant that the data you provide is accurate and undertake to notify us of any change. If you provide third-party data, you must have informed them beforehand of the contents of this policy.