1. Data controller
- Owner
- Xavier Termes Asensio
- Trading name
- INSTALTERMES
- NIF
- 34746277Q
- Address
- Carrer del General Moragues, 70 · 43203 Reus (Tarragona)
- Phone
- 617 777 848
2. What data we process
We only process the data you give us directly:
- Quote form on the home page: your name, phone number, town, the service you need and the message you write.
- Certificate request form: full name, phone, email, your relationship to the property, how you prefer us to contact you, the installation's address, postcode and town, type of property, your answers about the installation, any notes you add and, if you choose to attach them, photos and PDF documents.
- Calls, WhatsApp and email: the data you share when you contact us this way.
- Providing the service: the installation address, supply details and whatever is needed to issue the certificate and the invoice.
Fields marked with an asterisk (*) are needed to handle your request: without them we cannot prepare the quote or contact you. Photos and documents are optional. Please make sure they show only the installation and do not include people, identity documents or unnecessary details about others.
This website uses no analytics or advertising cookies and collects no browsing data for tracking. What the site stores in your own browser is explained in the cookie policy.
3. Why we use your data and on what legal basis
| Purpose | Legal basis | Retention |
|---|---|---|
| Handling your request, contacting you and sending you a quote. | Pre-contractual steps taken at your request (art. 6.1.b GDPR). | Until your request is resolved. If it does not lead to a contract: TO BE COMPLETED: retention period set by INSTALTERMES. |
| Providing the service: inspecting the installation, issuing certificates and filing them. | Performance of the contract (art. 6.1.b GDPR). | For as long as the relationship lasts and, afterwards, for the legal liability periods. |
| Invoicing, accounting and industrial safety obligations. | Compliance with legal obligations (art. 6.1.c GDPR). | The periods set by tax, commercial and industrial safety rules. |
| Preventing repeated or abusive use of the request form. | Legitimate interest in protecting the service from spam (art. 6.1.f GDPR). | The same request details are used, for the same retention period. |
We make no automated decisions and do no profiling with your data. We do not use your data to send you advertising.
4. Recipients
We do not sell or share your data with third parties unless required by law. It may be received by:
- Distribution companies and public authorities: when needed to process the connection, reactivation or legalisation of your supply or installation.
- Service providers as data processors, with access only to what their role requires:
- Web hosting: Cloudflare.
- Supabase: database and private storage for requests sent through the website and their files.
- Resend: sending the notice and confirmation emails for each request.
- Email: IONOS.
- Tax and accounting advisers.
If you choose to send your request by WhatsApp or by email, the message leaves your own device through that service, which handles it under its own terms.
5. International transfers
If you message us on WhatsApp (Meta Platforms), your data may be processed outside the European Economic Area. Meta applies appropriate safeguards, such as its participation in the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. If you prefer, you can contact us by phone.
Web hosting: TO BE COMPLETED: state whether Cloudflare processes data outside the European Economic Area and under which safeguard, according to its data processing agreement (DPA).
Email: TO BE COMPLETED: state whether the email provider processes data outside the European Economic Area and under which safeguard.
Supabase and Resend are companies based in the United States. Where request data is stored: TO BE COMPLETED: Supabase project region. Safeguard applying to transfers: TO BE COMPLETED: according to the data processing agreements (DPA) signed with Supabase and Resend.
6. Your rights
You can exercise the following rights at any time:
- Access: find out what data of yours we process.
- Rectification: correct inaccurate data.
- Erasure: ask us to delete it when it is no longer needed.
- Objection and restriction of processing.
- Portability: receive your data in a structured format.
- Withdraw your consent, where any processing is based on it, without affecting earlier processing.
To exercise them, write to info@instaltermes.com or by post to the address above, stating which right you wish to exercise. We will reply within one month at most.
If you believe we have not handled your rights properly, you can file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
7. Minors
Our services are intended for adults. We do not knowingly collect data from children under 14.
8. Security
We apply appropriate technical and organisational measures to protect your data against loss, misuse or unauthorised access. The site is served over an encrypted connection (HTTPS).
Requests sent through the website are kept in a database that cannot be reached from the public site, and photos and documents in private storage that only INSTALTERMES accesses through temporary links. No visitor can view other people's requests.
9. Changes to this policy
We may update this policy to reflect legal changes or changes to our services. The current version will always be published on this page, with the date it was last updated.