01Data protection

Privacy Policy

1. Data controller

In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), KDK Design is the controller of the personal data you provide through this website. Full tax details: [to be completed].

2. Data we process

We process the data you voluntarily provide through our contact and booking forms: name, email, data about your brand or company, and the information you include in your messages. We may also process technical browsing data in aggregate form.

3. Purpose and legal basis

To handle your information requests and bookings. Legal basis: consent and/or pre-contractual measures.
To manage the commercial relationship and the provision of services. Legal basis: performance of the contract.
To send you communications related to your request. Legal basis: consent or legitimate interest.

4. Data retention

We will keep your data for as long as the relationship or mutual interest lasts, and thereafter for the periods legally required to address potential liabilities. When no longer necessary, it will be deleted using appropriate security measures.

5. Recipients and data processors

We do not transfer your data to third parties except where legally required. We work with technology providers acting as data processors (for example, hosting and form management services), with whom we maintain the agreements required by the GDPR. Some providers may carry out international transfers with adequate safeguards.

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to hola@kdkdesign.es. If you believe the processing does not comply with the regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security

We apply appropriate technical and organisational measures to ensure a level of security appropriate to the risk, protecting your data against unauthorised access, loss or alteration.