BUILDA
Legal · 02

Privacy policy

Last updated: October 14, 2026

1. Data controller

  • Controller: Leonel Foggia, individual (trade name: Builda)
  • Address: Madrid, Spain
  • Email: hola@builda.es

2. Data we process

Only what you send us through the contact form (Spanish or English) or by email:

  • Name
  • Email
  • Company (optional)
  • Message

This site does not use analytics or advertising tools.

3. Why we use it

  • To reply to your enquiry.
  • If you ask for it, to prepare a proposal and manage any resulting professional relationship.

We do not send marketing communications or newsletters.

4. Legal basis

Pre-contractual steps taken at your request (Art. 6.1.b GDPR) and our legitimate interest in handling the enquiries we receive (Art. 6.1.f GDPR).

5. Retention

Enquiries that do not lead to a contract are kept for 12 months from receipt and then deleted. For now, deletion is handled through periodic manual review. If a service is contracted, data is kept for the duration of the relationship and the legally required periods afterwards. You can ask for earlier deletion at any time.

6. Providers involved

We do not share your data with third parties unless required by law. We use these providers, which process data on our behalf:

  • Lovable (Lovable Cloud): website hosting and storage of enquiries. The database is hosted in the European Union (Stockholm, Sweden).
  • Resend: sends an internal notice with the enquiry content to hola@builda.es when an enquiry arrives. Resend is based in the United States, so this involves an international data transfer.
  • Hostinger: email service for hola@builda.es, where we receive notices and any emails you send us.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by emailing hola@builda.es. We reply within one month at the latest. If you believe we did not handle your request properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security

We apply reasonable technical and organizational measures to protect your data against loss, alteration or unauthorized access.