Privacy Policy

“VERA Architecture” is deeply committed to complying with Spanish and European regulations on the protection of personal data and guarantees full compliance with the obligations set forth therein, as well as the implementation of the security measures provided for in the General Data Protection Regulation (GDPR) (EU) 2016/679, of April 27, and in Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD and GDD, hereinafter LOPD).

In accordance with these regulations, we hereby inform you that using our website may require you to provide certain personal data through contact forms or by sending emails, and that this data will be processed by“VERA Architecture,” the data controller, whose contact information is as follows:

IDENTITY OF THE DATA CONTROLLER

Business Name: Verónica Rubio Martínez
Tax ID Number: 18454472P
Registered Office: Avda. de Sagunto, 114 – 44002, Teruel – Spain
Email: hola@veraarquitectura.es

Collection and Processing of Personal Data

Personal data is any information relating to an individual: name, email address, mailing address, phone number, tax ID number (NIF)/foreign resident ID number (NIE), etc. Additionally, when a user visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by their Internet service provider.

“VERA Architecture,” as the Data Controller, has a duty to inform users of its website about the collection of personal data that may take place, either through the sending of emails or by filling out the forms included on the website.

Only the data necessary to provide the contracted service or to adequately respond to the User’s request for information will be collected. The data collected is identifying information and is limited to what is reasonably necessary to carry out the activity in question. In particular, no specially protected data is collected at any time. Under no circumstances will the data be used for any purpose other than that for which it was collected.

Contact/Email Forms

Purpose: To respond to your request for information submitted through our contact form(s).

Legal Basis: The legal basis for this processing is the User’s consent, which may be revoked at any time.

Data Transfer: Personal data will be processed through servers managed by Loading, which will be considered the Data Processor.

Newsletter Sign-Up Forms

Purpose: To send communications—some of which are commercial—that may be of interest to Users based on the website’s subject matter. As established by the LSSICE, “VERA Architecture” undertakes not to send commercial communications without identifying them as such. For these purposes, information sent to customers for the purpose of maintaining an existing contractual relationship, if any, will not be considered a commercial communication.

Legal Basis: The legal basis for this processing is the User’s consent, which may be revoked at any time.

Data Transfer: Personal data will be processed through servers managed by Mailerlite, which will be considered the Data Processor.

Minors

Only individuals over the age of 14 may provide personal information on this website. As required by the LOPD and GDD, in the case of minors under the age of 14, the consent of their parents or guardians is required for us to process their personal information.

Furthermore, only individuals over the age of 18 may contract our services. In the case of minors under the age of 18, the consent of their parents or legal guardians is required for us to provide the services offered, unless the minor is emancipated.

Safety Measures

Users of the “VERA Architecture” website are hereby informed that we have implemented all security, technical, and organizational measures within our power to prevent the loss, misuse, alteration, unauthorized access, and theft of data, thereby ensuring the confidentiality, integrity, and quality of the information contained therein, in accordance with current data protection regulations. The personal data collected through the forms is processed solely by “VERA Architecture” staff or by designated data processors.

The “VERA Architecture” website also uses SSL encryption, which allows users to securely submit their personal information through the website’s contact or registration forms.

Accuracy of the data

The User represents that all information provided by him or her is true and accurate and agrees to keep it up to date. The User is responsible for the accuracy of their information and shall be solely liable for any conflicts or disputes that may arise from false information. It is important that, so that we can keep personal information up to date, the User notify “VERA Architecture” whenever there has been any change to such information.

Data Transfer

“VERA Architecture” will not transfer or disclose your data to any third party, except in cases provided for by law or when strictly necessary for the provision of a service. Specifically, the data may be transferred to:

Technology or IT service providers
Payment Service Providers
Courier and Parcel Delivery Companies
Third parties or intermediaries, acting as service providers, who operate on our behalf (administrative agencies, consulting firms, etc.).

Data transfers will be carried out with the strictest confidentiality, using the necessary measures, such as the signing of confidentiality agreements or adherence to the privacy policies set forth on their respective websites. The User may object to the transfer of their data to Data Processors by submitting a written request through any of the means listed above.

In addition, when necessary, customer data may be disclosed to certain agencies in compliance with a legal obligation: the Spanish Tax Agency, the Labor Inspectorate, etc.

Exercising User Rights

The LOPD and the GDPR grant data subjects the right to exercise a number of rights related to the processing of their personal data. To do so, the User must contact us via email at hola@veraarquitectura.es or by written communication to the address listed in our Legal Notice, providing adequate identification. Such communication must include the following information: the User’s first and last names, the purpose of the request, the mailing address, and supporting documentation.

The User must exercise these rights personally. However, they may be exercised by a person authorized as the User’s legal representative, provided that documentation proving such representation is submitted.

The User may request to exercise the following rights:

The right to request access to personal data, which is the right to obtain information about whether your own personal data is being processed, the purpose of any such processing that may be taking place, as well as available information regarding the source of such data and any disclosures of the data that have been made or are planned.
The right to request the correction of your personal data if it is incorrect or inaccurate, or the deletion of data that is found to be inappropriate or excessive.
The right to request the restriction of the processing of your personal data; in such cases, “VERA Architecture” will retain only the data strictly necessary for the exercise or defense of legal claims.
Right to object to processing: This refers to the data subject’s right to prevent the processing of their personal data or to have such processing cease in cases where their consent is not required for the processing, the data is contained in marketing files, or the processing is intended to make decisions regarding the data subject based solely on the automated processing of their data, unless further processing is necessary for legitimate reasons or to exercise or defend potential claims.
Right to data portability: If you wish to have your data processed by another company, “VERA Architecture” will provide you with your data in an exportable format.

If consent has been given for a specific purpose, the User has the right to withdraw that consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to its withdrawal.

We are committed to fulfilling all of these rights within the maximum legal timeframe (1 month).

If a User believes there is a problem with the way “VERA Architecture” is handling their data, they may direct their complaints to the Data Security Officer or the appropriate data protection authority; in Spain, this is the Spanish Data Protection Agency.

Data Retention

The personal data of Users who use the contact form or send us an email requesting information will be processed for the time strictly necessary to respond to the request for information, or until the consent given is revoked.

Customers’ personal data will be processed until the contractual relationship ends. The retention period for personal data will be the minimum necessary and may be retained for up to:

4 years: Law on Social Security Violations and Penalties (obligations regarding enrollment, registration, deregistration, contributions, payment of wages, etc.); Articles 66 et seq. of the General Tax Law (accounting records, etc.)
5 years: Art. 1964 of the Civil Code (personal actions without a specific statute of limitations)
6 years: Art. 30 of the Commercial Code (accounting records, invoices, etc.)
10 years: Article 25 of the Law on the Prevention of Money Laundering and Terrorist Financing.
No time limit: disaggregated and anonymized data.

For its part, the data of Users who subscribe to the newsletter will be retained indefinitely, until the consent they have given is revoked.

Social Media

“VERA Architecture” has profiles on some of the major social media platforms (Instagram). The purpose of data processing by “VERA Architecture” is to inform its followers about its activities, using the tools provided by the respective social media platform, and to provide personalized customer service. Users should be aware that the use of these social media platforms is subject to their respective terms of use and privacy policies. “VERA Architecture” recommends that Users review these terms and privacy policies before using the links or applications provided.

Under no circumstances will “VERA Architecture” extract data from social media platforms unless the User’s specific and express consent has been obtained for that purpose. Furthermore, “VERA Architecture” is not responsible for the privacy practices of these social media platforms or their applications, particularly with regard to confidentiality, the processing of personal data, and content.

Confidentiality

The information provided by the User shall, in all cases, be considered confidential and may not be used for any purpose other than those described herein. “VERA Architecture” undertakes not to disclose or reveal any information regarding the User’s requests, the reasons for the requested advice, or the duration of its relationship with the User.

Validity

This privacy and data protection policy was drafted on July 2, 2025. It may be subject to change based on future changes in regulations and case law; it is the data subject’s responsibility to review the updated document in order to understand their rights and obligations in this regard at all times.