Privacy Policy Last Updated: September 2026 Albasini y Berkhout Arquitectos (referred to as "we", "us", or "our") is committed to protecting the privacy and personal data of visitors to our website, https://ayb.es, as well as our clients, prospective clients, and partners. This Privacy Policy outlines how we collect, use, store, and protect your personal data when you interact with our website or engage our architectural and design services. 1. Data Controller The entity responsible for processing your personal data collected through https://ayb.es is: Name: Albasini y Berkhout Arquitectos Website: https://ayb.es Contact: Please refer to the contact details provided on our Contact page or via WhatsApp on our website. 2. Information We Collect We collect personal data only when necessary to deliver our website content, process inquiries, or fulfill obligations related to our professional services, including architecture, interior design, project management, rehabilitation, and urban planning. Data Provided Directly by You Contact Information: Name, email address, telephone number, or WhatsApp details provided when contacting us via email, site contact forms, or direct messaging buttons. Project Inquiries: Project specifications, site locations, budget parameters, and design preferences submitted in connection with potential architectural or design commissions. Data Collected Automatically Technical Data: IP addresses, browser type and version, operating system, access times, and referring website URLs gathered automatically through web server logs. Usage Data: Pages viewed, navigation paths, and interactions with portfolio showcases on our website. 3. Legal Basis and Purposes of Data Processing We process your personal data under the following legal bases established by GDPR Article 6: Pre-contractual and Contractual Measures (GDPR Art. 6(1)(b)): Processing data required to answer preliminary project inquiries, prepare proposals, or execute contracts for architectural, interior design, site management, or urbanism services. Legitimate Interests (GDPR Art. 6(1)(f)): Maintaining website security, optimizing user experience, analyzing portfolio performance, and managing business operations. Compliance with Legal Obligations (GDPR Art. 6(1)(c)): Retaining technical, transactional, or financial documentation required under Spanish tax, administrative, or planning laws. Consent (GDPR Art. 6(1)(a)): Processing non-essential cookies or direct messaging requests where explicitly authorized by you. 4. Retention of Data Personal data is retained only for as long as required to achieve the purpose for which it was collected: Inquiries and Contact Forms: Retained for the duration necessary to resolve the inquiry, and for up to two years thereafter if no client relationship ensues. Client and Project Files: Retained for the statutory limitation periods prescribed by Spanish architectural liability laws, tax regulations, and civil code requirements. Server Logs: Retained for a maximum period of six months before automatic deletion. 5. Sharing and Disclosure of Data We do not sell, rent, or trade your personal data to third parties. We may disclose personal data to the following categories of recipients solely to support our operational and legal requirements: Service Providers: Technical hosting providers, IT infrastructure maintainers, and communication service providers operating under data processing agreements. Professional Subcontractors: External engineering consultants, surveyor firms, or municipal authorities strictly as required for the execution of authorized architectural projects. Legal Authorities: Regulatory agencies, courts, or public administration bodies when required by applicable legislation. 6. Cookies and Tracking Technologies Our website utilizes essential technical cookies necessary for functional site navigation and security. Any non-essential performance or analytical tools are deployed only with prior user consent via our cookie notification settings. You may configure your browser software to block or delete cookies at any time. 7. Your Data Protection Rights Under GDPR and Spanish LOPDGDD regulations, you hold the following rights regarding your personal data: Right of Access: Request confirmation of whether we process your data and receive a copy of that data. Right to Rectification: Request correction of inaccurate or incomplete personal data. Right to Erasure ("Right to be Forgotten"): Request deletion of your data when it is no longer required for the original purposes. Right to Restriction: Request temporary restriction of data processing under specific statutory conditions. Right to Data Portability: Receive your data in a structured, commonly used machine-readable format. Right to Object: Object to processing based on legitimate interests or direct marketing. To exercise any of these rights, please contact us using the contact details on https://ayb.es. You also reserve the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD) at www.aepd.es. 8. Data Security We implement technical and organizational security measures to protect your personal information against unauthorized access, loss, alteration, or destruction. However, electronic transmissions over the internet cannot be guaranteed as completely secure, and interactions are undertaken at your own risk. 9. Updates to This Policy We reserve the right to revise this Privacy Policy periodically to reflect changes in legal requirements or operational practices. Updated versions will be published directly on this page with an updated revision date.