1. Data controller
- Controller
- Morris Romo Dennis, self-employed sole trader, trading as Touch and Control
- Tax ID (NIF)
- 78982624A
- Registered address
- Calle Virgen de la Cabeza 2, casa 3, 29680 Estepona (Málaga), España
- Phone
- +34 696 191 430
We have not appointed a Data Protection Officer, as the law does not require one for a business of our size and activity. For anything related to your data, write to the email address above.
2. What data we collect
We only collect the data you choose to send us:
- Contact and quote forms: the details you enter, such as your name, email address, phone number, the type of project and your message, together with your acceptance of this policy.
- Email, phone or WhatsApp: the details and information you share when you contact us directly.
Please do not include sensitive data (for example about health) in your messages; we do not need it to answer you.
If you accept analytics cookies, we use Google Analytics 4 to measure visits and which contact buttons are used, in aggregate. It is off until you accept, and you can change your choice at any time. The website does not use advertising or social media tracking. Details are in our cookie policy.
3. Why we use your data
- To answer your enquiries and questions.
- To prepare and send you the quotes or proposals you ask for, and to follow up on them.
We do not use your data to send you marketing, we do not sell it, and we do not make automated decisions or build profiles about you.
4. Legal basis
- Your consent (Article 6(1)(a) GDPR), which you give when you tick the box in the form or when you contact us of your own accord. You can withdraw it at any time by writing to us; this does not affect anything we did lawfully before you withdrew it.
- Steps taken at your request before entering into a contract (Article 6(1)(b) GDPR), when you ask us for a quote, a visit or a proposal.
If you do not provide the data marked as required in the form, we will not be able to answer your request.
5. How long we keep your data
We keep your data for as long as we need it to answer your enquiry or handle your quote. If no working relationship follows, we delete it within 12 months of our last contact, unless you ask us to delete it sooner.
If you become a client, we keep your data for as long as the relationship lasts and, afterwards, for the periods required by law (for example, accounting and tax obligations) or for as long as legal claims may arise. After that, it is deleted.
6. Who has access to your data
We do not share your data with third parties, except where the law requires it (for example, with tax authorities or courts).
To run this website we rely on service providers that act as data processors, process data only on our instructions and are bound by a data processing agreement:
- Wix.com Ltd., which provides the hosting for this website and the contact forms. The data you send through a form is stored on Wix's platform.
- Google Ireland Limited (Google Analytics 4), only if you accept analytics cookies: it receives usage data about your visit (pages viewed, approximate location, device and browser, and a random identifier), never the content of the forms.
If you choose to contact us through WhatsApp, the message is carried by that service under its own terms and privacy policy.
7. International transfers
Wix.com Ltd. is based in Israel, a country the European Commission recognises as providing an adequate level of data protection. Wix and its group companies and sub-processors may store or access data from other countries, including the United States. Those transfers are covered by the Standard Contractual Clauses approved by the European Commission, together with the additional safeguards provided by Wix.
Google Analytics data may be transferred to Google LLC in the United States. Google LLC is certified under the EU-US Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection; Google also applies the Standard Contractual Clauses.
You can ask us for more information about these safeguards by writing to us.
8. Your rights
Under the GDPR and the LOPDGDD you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data when, among other reasons, it is no longer needed.
- Object to the processing of your data.
- Restrict processing in certain cases, for example while we check a request.
- Data portability: receive the data you gave us in a structured, commonly used, machine-readable format, or have it sent to another controller.
- Withdraw your consent at any time.
9. How to exercise your rights
Send an email to morris@touchandcontrol.com saying which right you want to exercise. If we have reasonable doubts about your identity, we may ask you for additional information to confirm it. We will reply within one month, which can be extended by two further months for complex requests; we will tell you if that happens. Exercising your rights is free.
10. Right to complain
If you believe your data has not been handled properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at www.aepd.es. We would appreciate the chance to resolve your concern first, so please feel free to contact us.
11. Security
We apply appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. The website is served only over an encrypted connection (HTTPS).
12. Minors
This website is aimed at adults. We do not knowingly collect data from children under 14.
13. Changes to this policy
We may update this policy to reflect legal or technical changes. The current version is always published on this page, with the date of the last update.