In accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), users of this website are hereby informed about the processing of their personal data.
1. Data controller
Owner: Rubén Gilberto Ríos (trading as Cristalar)
Tax ID (NIF / NIE): Z1578723P
Address: Calle Virgen del Amparo, 6 — 29601 Marbella (Málaga), Spain
Telephone: 603 52 82 80 · 624 05 63 45
Email: cristalar.costadelsol@gmail.com
Activity: glazing, glass and mirror installation in Marbella and the Costa del Sol
2. Data processed
This website has no forms that send or store data on the server and no user registration. The quote assistant on the home page simply prepares a message in the user's own WhatsApp app, which the user freely decides whether or not to send. Personal data are collected only when the user voluntarily makes contact by telephone, WhatsApp or email, and are limited to those the person provides: name, telephone number, email address and the information needed to prepare a quote.
3. Purpose of processing
- To respond to enquiries and quote requests.
- To carry out the measurement and technical advice prior to the quote.
- To manage the business relationship and the provision of the contracted service.
- To issue invoices and comply with the applicable legal, tax and accounting obligations.
4. Legal basis
Processing is based on the consent of the data subject when making contact (Art. 6(1)(a) GDPR), on the performance of a contract or of pre-contractual measures taken at their request (Art. 6(1)(b) GDPR) and on compliance with legal obligations to which the controller is subject (Art. 6(1)(c) GDPR).
5. Retention period
Data will be retained for as long as the business relationship continues and, once it has ended, for the periods required by law to address any possible liabilities. Once those periods have elapsed, the data will be erased using appropriate security measures.
6. Recipients
Data are not disclosed to third parties except where required by law or requested by the competent authorities. Certain providers act as data processors, with limited access to the data and with the safeguards required by law: the web hosting provider, the email service and the messaging platforms used to respond to enquiries.
7. International transfers
Some of the providers mentioned may be located outside the European Economic Area. In such cases, transfers are covered by the European Commission's adequacy decisions or by the Standard Contractual Clauses it has approved.
8. Rights of data subjects
Anyone may exercise the rights of access, rectification, erasure, objection, restriction of processing and portability, and may withdraw consent given, by contacting the controller using the contact details in section 1 and enclosing a copy of an identity document. They may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
9. Links to third-party services
This site includes links to and embedded content from external services, such as WhatsApp, Google Maps and Instagram. When using them, the user is subject to the privacy policies of those platforms.
10. Cookies
This website does not set any first-party analytics, advertising or tracking cookies. However, the Google Maps map, which only loads if the user clicks “View map”, may set third-party cookies. The website's fonts are served from our own hosting, with no connections to third-party servers. Users can configure their browser to block or delete cookies at any time.
11. Security
The technical and organisational measures necessary to ensure the security of personal data and prevent their alteration, loss, or unauthorised processing or access are applied.
12. Changes
This policy may be updated to reflect changes in legislation or in the services provided. We recommend that you review it periodically.
Last updated: October 2026.