Privacy Policy

In compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), Isidro Larizgoitia informs website users https://isidrolarizgoitia.studio/: regarding the processing of the personal data that they themselves provide.

1. Controller of your data

 

2. Purpose of the processing of personal data

Personal data collected via the website’s contact form (name, email address, phone number, and message) or through email communications will be processed for the following purposes:

  • Handling of inquiries and requests for information: Provide responses to questions, technical inquiries, or preliminary assessments raised by users regarding the conservation and restoration of artworks—such as sculptures and paintings—and movable cultural heritage.

  • Budgeting and project management: Gestionar las solicitudes de presupuesto a medida y mantener el contacto profesional con instituciones públicas, museos o titulares de colecciones privadas.

  • Website security and technical maintenance: Ensure proper technical functionality and prevent automated or fraudulent submissions via the forms.

No automated commercial profiles will be created using the data provided, nor will any automated decisions be made based on such data.

 

3. Legal basis for the processing of your data

The legal basis that legitimizes the processing of your personal data is:

  • The data subject’s explicit consent (Article 6.1.a of the GDPR), granted freely and unequivocally by checking the box to accept this Privacy Policy before submitting the contact form.

  • The implementation of pre-contractual measures or the execution of a contract (artículo 6.1.b del RGPD), cuando el usuario solicita una valoración técnica o un presupuesto profesional de restauración.

  • Compliance with legal obligations applicable to the controller (Article 6.1(c) of the GDPR), in the event that the provision of services is formalized.

 

4. Data retention period

The personal data provided will be retained for the time strictly necessary to address your inquiry or process your request for a quote. Once the communication—or, where applicable, the professional relationship—has concluded, the data will be kept in a securely blocked state for the periods established by law, in order to address any potential legal, tax, or administrative liabilities arising from the processing.

 

5. Recipients and data disclosure

Personal data will not be sold, rented, or transferred to third parties, unless a legal obligation requires it (such as in the case of public administrations or competent authorities).

However, for the technical operation of the website and email, certain technology providers (such as the web hosting provider or hosting hosting) pueden tener acceso a los datos en calidad de Encargados del Tratamiento, actuando siempre bajo las instrucciones del responsable y con contratos que garantizan el pleno cumplimiento del RGPD dentro del Espacio Económico Europeo.

 

6. User rights regarding data protection

Everyone has the right to obtain confirmation as to whether Isidro Larizgoitia is processing personal data concerning them. Data subjects have the right to:

  • Right of access: To know which of your personal data are being processed.

  • Right of rectification: Request the modification of data that is inaccurate or incomplete.

  • Right to erasure (right to be forgotten): Request the deletion of your data when, among other reasons, it is no longer necessary for the purposes for which it was collected.

  • Right to restriction of processing: Request the temporary suspension of the processing of your data in certain circumstances.

  • Right to object: To object to the processing of your personal data on grounds relating to your particular situation.

  • Right to portability: To receive the personal data provided in a structured, commonly used, and machine-readable format, and to be able to transmit them to another controller.

  • Right to withdraw consent: Withdraw the consent granted at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, the user may send a written communication—specifying the right they wish to exercise and accompanied by a copy of their national ID card or an equivalent identification document—to the following email address: info@isidrolarizgoitia.com or to the postal address indicated in the first section.

The user is also informed that they have the right to file a complaint with the Spanish Data Protection Agency (AEPD) through its electronic headquarters ([https://www.aepd.es/](https://www.aepd.es/)) if you believe that the processing of your personal data infringes applicable regulations.

 

7. Security measures

Isidro Larizgoitia has adopted the necessary technical and organizational measures to guarantee the security and integrity of the personal data it processes, including the encryption of communications using the secure SSL protocol (https://), in order to prevent its loss, alteration, and/or access by unauthorized third parties.