Controller
ESTILO SPACES is the brand used on this website by AUTO & ESTILO CONCEPT SL, tax number B25965112, registered office at Calle Jesús Espinosa 9, puerta B, planta 3, 36340 Nigrán, Pontevedra, España.
Contact and complaints email: autoestiloconcept@gmail.com. You may also write to the registered office. Contact telephone: +34 697 512 518.
Information we receive
A brief provides your name, email, language, requested service, description and optional room information such as city, country, area, style or furniture budget. A project may require billing information and references. Avoid sending identity documents or health information; this website does not request card details.
Purposes and basis
We use your inquiry to respond and prepare the proposal you request. A contract involves managing scope, delivery and payment. Billing records are kept to fulfil legal duties. Administrative access and relevant changes are protected and logged for our legitimate security interest. Reading this policy is not blanket consent for other uses.
- Pre-contractual steps and contract: GDPR Article 6(1)(b).
- Tax and accounting duties: GDPR Article 6(1)(c).
- Proportionate service security: GDPR Article 6(1)(f).
Recipients and providers
The operator’s authorised staff access information according to their role. The application and database use the operator’s VPS; its provider, location and processing agreement must be documented before contracting. Advisers or authorities receive only information necessary for a justified or legally required purpose.
If you choose an enabled payment method, its provider receives the reference, amount and information needed for the transaction. The payment screen identifies that provider and its terms. Inquiries are not automatically sent to Telegram, marketing services or social networks. A prepared payment integration does not establish that a provider is active.
Transfers and external services
No third-party analytics or advertising is embedded. Library links open independent services with their own policies. Before new mail, payment or hosting providers are connected, their processing countries and required safeguards are reviewed. An absence of international transfers is not guaranteed without checking those agreements.
Retention and security
Inquiries without a project are reviewed for deletion 12 months after the last contact, unless a conversation or claim remains open. Contract information is retained as needed for the work and related responsibilities. Accounting documentation is retained for applicable periods, generally six years from the last entry, with restricted use and extensions where an obligation or dispute requires it.
Administrative sessions expire after eight hours. Security logs and audit records are reviewed according to purpose; the ordinary operational criteria are 30 days for logs and 12 months for audit records, unless an incident is documented. Deletion is coordinated with backups and retention duties; legally required records are not promised immediate deletion.
Your rights
You may request access, correction, erasure, restriction, objection and portability where applicable through the published contact channel or by writing to the registered office marked “Data protection”. Provide enough information to locate your request; additional identity information is requested only when necessary and proportionate. You may also complain to the Spanish Data Protection Agency at www.aepd.es.
The brief does not subscribe you to marketing. There is no advertising profiling or automated decision with legal effect. Technical security checks do not replace human review of a project. A new purpose will be explained before it is applied.