Privacy
Last reviewed: 24 October 2026
How browsing data and communications with Kopala are handled under the GDPR and Spanish Organic Law 3/2018.
- Owner or registered business name
- [OWNER’S FULL LEGAL NAME OR REGISTERED BUSINESS NAME]
- Tax identification number
- [OWNER’S TAX IDENTIFICATION NUMBER]
- Business address
- [FULL BUSINESS ADDRESS, POSTCODE AND TOWN]
- [CONTACT EMAIL ADDRESS]
1. Controller
The controller is Kopala’s owner identified above. Use the email or business address in that panel, or call +34 653 71 44 80.
2. Data and purposes
This site has no forms, accounts, online checkout, newsletter, analytics or advertising tools. It does not ask for documents or consultation records.
When you call or send a message, Kopala may receive your name, contact details and information you choose to share to answer the request or arrange an appointment.
The hosting service may receive your IP address, access time, requested resource, browser and technical connection details needed to serve and protect the website. Provider and location: [HOSTING PROVIDER AND COUNTRY OF PROCESSING].
3. Legal bases
Requests about products or appointments are handled to take steps at your request before entering a contract (GDPR Article 6(1)(b)). Other incoming communications are answered on the basis of the legitimate interest in responding and maintaining contact (Article 6(1)(f)).
Necessary technical data relies on the legitimate interest in serving and securing the website (Article 6(1)(f)). Data required by legal obligations relies on Article 6(1)(c). The optional map relies on your consent (Article 6(1)(a)). Visiting or asking about a product does not subscribe you to marketing.
4. Retention
Enquiry data is kept until the response and follow-up are complete. Appointment and service data is kept while needed to manage the relationship and afterwards for applicable legal periods and potential liabilities, with restricted storage where required.
Cookie preferences are valid for up to 180 days. Hosting log retention: [RETENTION PERIOD FOR HOSTING LOGS].
5. Recipients and providers
Hosting and support providers may access necessary data under the appropriate safeguards and agreements. Authorities may receive data where legally required. Personal data is not sold.
WhatsApp and Instagram are external services opened through links. Google Maps receives data once you enable the map. These providers may process information outside the European Economic Area; their policies describe locations and applicable safeguards.
6. Your rights
Where provided by law, you may request access, correction, deletion, objection, restriction and portability. You may withdraw consent at any time without affecting the lawfulness of earlier processing.
Send your request to the controller’s email or business address above, specifying the right and relevant data. Additional identity information will only be requested where necessary and proportionate.
The usual response period is one month, subject to lawful extensions. You may complain to the Spanish Data Protection Agency if you believe your rights have been infringed.
7. Required data and scope
The site does not profile visitors or make automated decisions with legal effects. You do not need to share personal data or enable the map to browse. Basic contact details are needed to respond to a request or arrange an appointment.
This policy covers the site and initial contact. Specific privacy information for a consultation or another service will be provided when its data is collected. Changes to website processing will be reflected here and fresh consent requested where necessary.