Privacy policy

Controller and contact

The controller is Ramon Adamuz Camacho, a self-employed professional trading as SON Agency. His tax identification number is 39956921X and his professional address is Calle Sagitario, 31, 08398 Santa Susanna (Barcelona), Spain. For any questions about your data, email sonagency.marketing@gmail.com.

Data we process

This is an informational website with no contact forms, public registration, shop or newsletter subscription. If you contact us by email, telephone, WhatsApp or social media, we process the information you choose to share to handle your message.

• Enquiries and projects: your name, contact details and message or quotation request.
• Operation and security: IP address, date and time, requested path, browser and request outcome in technical server logs.
• Administration: authorised administrators’ identifiers, hashed passwords and records of access and content changes.

Purposes and legal basis

• Responding to enquiries and preparing requested quotations or services: pre-contractual steps or performance of a contract (GDPR Article 6(1)(b)); for other professional enquiries, our legitimate interest in responding (Article 6(1)(f)).
• Managing administrative, tax and accounting duties arising from services: compliance with legal obligations (GDPR Article 6(1)(c)).
• Protecting the website, preventing unauthorised access and limiting abusive requests: our legitimate interest in the security of the service and its users (GDPR Article 6(1)(f)).

No analytics, advertising or profiling

We do not use Google Analytics, Google Tag Manager, Meta Pixel or equivalent analytics or advertising trackers. We do not profile visitors or make automated decisions with legal effects. Security logs are used to operate and protect the service, not for advertising campaigns or behavioural statistics.

Retention

Enquiries are kept for as long as needed to respond and follow up. Professional relationship records are retained for the duration of that relationship and any legally required retention or liability periods.

Technical logs are automatically overwritten through size-based rotation. Relevant records may be retained as needed to investigate an incident, resolve it and address associated liabilities. Admin sessions expire after at most 8 hours and after 30 minutes of inactivity.

Providers and external services

This website is hosted on a Contabo VPS. The published contact email uses Google Gmail. We do not sell personal data; data may be disclosed where legally required or necessary to provide the requested service.

Links to WhatsApp, Instagram and other external pages open third-party services; they are not trackers or embedded content on this website. Their own policies apply when you access them. Using these services may involve processing outside the European Economic Area. Any international transfer must rely on an adequacy decision or the safeguards provided in Chapter V of the GDPR. You can request information on recipients and applicable safeguards at sonagency.marketing@gmail.com.

Your rights

You may request access, rectification, erasure, objection, restriction and, where applicable, portability by emailing sonagency.marketing@gmail.com. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. We may request proportionate additional information to verify your identity where necessary. You may also complain to the Spanish Data Protection Agency at www.aepd.es.

Security and policy changes

We use HTTPS, restricted admin access, session protection and measures against abusive requests. These measures reduce risk but cannot guarantee absolute security. We will update this information if website features or data processing change.