Privacy policy

1. Controllers

Manuel Cervantes Vico and Alejandro Castellón Martínez, who work project by project under the name Onyx Spain (Granada, Spain). We are not a company: the two of us process the data as individuals. Contact for any privacy matter: [email protected].

2. What data we process and why

• Contact form

  Name, email, company (optional), message and the language of the page. We use them to answer your enquiry and, where relevant, prepare a project proposal.

• Email and phone

  If you write or call us, we process the details you give us in order to help you.

• WhatsApp

  If you tap the WhatsApp button, the conversation happens in that app, with your phone number and what you write. We use it only to reply to you.

• Browsing

  The site stores your cookie choice in your browser. We use no analytics or advertising. See the cookie policy.

3. Legal basis

Your consent (Art. 6.1.a GDPR), which you give by ticking the form checkbox or by writing to us, and, if you ask for a quote or proposal, steps taken at your request before entering a contract (Art. 6.1.b GDPR). You can withdraw consent at any time without affecting what was already done.

4. Who we share data with

We do not sell your data or pass it on for commercial purposes. For the form to work these providers are involved, acting as processors:

• FormSubmit (formsubmit.co)

  Receives the form submission and forwards it to our email.

• Google (Gmail)

  Hosts the mailbox where we receive the messages.

• Meta (WhatsApp)

  Only if you choose to message us on WhatsApp; their own terms and privacy policy apply.

• Web hosting provider

  Serves the pages of this site and may log technical connection data, such as the IP address, for security.

5. International transfers

Some of these providers may process data outside the European Economic Area. In that case they rely on safeguards recognised by the GDPR, such as standard contractual clauses or European Commission adequacy decisions.

6. How long we keep data

As long as needed to deal with your enquiry. If we end up working together, for the legal periods that apply to the contractual and tax relationship. After that we delete the data or keep it blocked while liabilities may still arise.

7. Your rights

You can request access, rectification, erasure, objection, restriction of processing and portability of your data, and withdraw your consent, by writing to [email protected] and saying which right you are exercising. If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es).

8. Minors and security

This site is not aimed at children under 14. We apply reasonable measures to protect data, such as encrypted connections (HTTPS), restricted access to the mailbox and the use of recognised providers.

9. Changes to this policy

If we change anything significant, we will update this page and the date above.