Privacy policy

Last updated: 12 October 2026.

1. Data controller

IGNACIO DE LA CRUZ MARTINEZ, Tax Identification Number (NIF) 79055224S, operates under the brand name AIRIS Agency. Registered address: Calle Quevedo 8, 29660 Nueva Andalucía, Spain. Contact details for privacy matters and exercising your rights: info@airis.agency.

2. Data, purposes and legal bases

  • Enquiries and proposals: We process your identification and contact details, company information, services of interest, quotation, the status of your website and any content you provide. We use this information to respond to your enquiry and prepare the requested proposal. The legal basis is the taking of pre-contractual steps when you request our services; for other enquiries, it is our legitimate interest in responding to communications received.
  • Provision of services: If you place an order, we will use the necessary data to manage the order, communications and invoicing, in accordance with the contract and the applicable legal obligations.
  • Operation and safety: The server and security tools may process IP addresses, technical information and logs in order to provide the service, detect misuse and protect the site. This is based on the legitimate interest in maintaining the site’s availability and security.
  • Statistics: Google Analytics processes information about visits, devices and interactions when you accept the ‘statistics’ category. This is based on your consent, which you can withdraw via ‘Cookie Settings’.

Fields marked as compulsory are required to process the form. Please do not provide any sensitive data or unnecessary information about third parties. We do not use enquiries to send you advertising or newsletters. We do not make decisions with legal effects based solely on automated processing.

3. Where are they stored and who can access them?

Enquiries are stored in the WordPress forms system and sent to AIRIS email accounts. Hostinger provides website hosting and email services, and therefore processes the data necessary to provide those services. Maintenance and security providers may also access the data, to the extent necessary for their role and in accordance with the applicable terms and conditions.

When you authorise external statistics or services, the relevant providers may receive technical browsing information. We use Google Analytics for statistics and Google for services such as maps. If you choose to book an appointment via Cal.com or contact us via WhatsApp, the provider will receive the details you provide through that channel and will process them in accordance with their terms and conditions and privacy policy. Links to social media platforms do not in themselves mean that we send them the content of your form.

Data may also be disclosed to government bodies and authorities where there is a legal obligation to do so. We do not sell your data.

4. International services

Some suppliers use infrastructure or sub-processors outside the European Economic Area. Their terms and conditions set out the applicable countries and mechanisms, such as adequacy decisions or standard contractual clauses, depending on the service and the recipient. You can request information about the providers and safeguards relating to your data at info@airis.agency.

See the Hostinger’s policy and its data processing agreement, the Google's policy, the Cal.com’s policy and the WhatsApp policy.

5. Retention

Enquiries and quotations that do not result in a contract will be retained for 12 months since the last contact. If you enter into a contract, your data will be retained for the duration of the contractual relationship and thereafter for the periods necessary to comply with legal obligations or fulfil liabilities. Where applicable, the data will be blocked and access to it will be restricted to those purposes.

The duration of the cookies is specified in the cookie policy. Technical logs will be retained only for as long as is necessary for operational purposes, security and incident resolution, and will not be reused for marketing communications.

6. Rights and complaints

You may request access, rectification, erasure, restriction, objection and data portability, where applicable, by writing to info@airis.agency or to the data controller’s address. Additional identity details will only be requested where necessary to verify the request.

You may object to processing based on legitimate interests on grounds relating to your particular situation. Where the legal basis is consent, you may withdraw your consent at any time, without this affecting the lawfulness of any processing carried out prior to that. For cookies, please use the ‘Cookie Settings’ option.

If you feel that your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency.

7. Updates

This policy will be updated when processing activities change. Changes requiring a new consent choice will be communicated through the relevant consent manager.