Garpe Studio
ES — Leer en españolContact

Privacy policy

Last updated: 2026-10-18

1. Data controller

  • Owner: Paula García Peña, trading as Garpe Studio
  • Tax ID (NIF): 75908920L
  • Address: Calle Cabo Prior 7, 11205 Algeciras (Cádiz), España
  • Email: [email protected]

2. What data we process

Only what you give us through the contact form or by email: name, email, phone (optional) and information about your space and project. We don’t ask for special categories of data; please don’t include them in your message.

3. Purposes and legal basis

  • Replying to your enquiry and preparing a proposal. Basis: your consent when submitting the form (Art. 6.1.a GDPR) and pre-contractual steps at your request (Art. 6.1.b).
  • Providing the contracted service, if we work together. Basis: performance of a contract (Art. 6.1.b) and tax and accounting obligations (Art. 6.1.c).

We make no automated decisions or profiling. We send no marketing communications without your express consent.

4. Retention

Enquiries that don’t lead to a project: up to 12 months after the last contact. Projects: for the duration of the relationship and then as long as tax and commercial law requires (up to 6 years).

5. Recipients and providers

We don’t share your data with third parties unless legally required. For the website and email to work, your data may pass through these technology providers:

  • Web hosting, anti-spam and email forwarding: Cloudflare, Inc., as data processor. The form uses Cloudflare Turnstile, which checks technical signals from your browser (not your form data) to confirm you aren’t a bot.
  • Form delivery: Resend (Plus Five Five, Inc.), which emails us the details you enter in the form.
  • Email: Google (Gmail), where we receive and answer your messages.

All of them may process data outside the European Economic Area (United States), with the safeguards of the EU-US Data Privacy Framework and the European Commission’s Standard Contractual Clauses. If we add new providers (for example, for the newsletter), we will list them here.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent at any time, by emailing [email protected]. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Children

Our services are aimed at adults. If you are under 14, please don’t send us your data.

8. Security

We apply appropriate technical and organisational measures: encrypted connection (HTTPS), a content security policy, no tracking cookies and restricted access to information.