Last updated: November 3, 2026

1. Data controller

In accordance with Regulation (EU) 2016/679, General Data Protection Regulation (GDPR), and Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), users are informed that the personal data provided through this website will be processed by:

The controller undertakes to process personal data lawfully, fairly and transparently, applying appropriate technical and organizational measures to guarantee its security and confidentiality.

2. Personal data we collect

The following categories of personal data may be collected through the C+C Estudio website:

Identification and contact data

Data related to project requests

Technical and browsing data

We recommend not including in the forms any especially sensitive data that is not necessary to request information about the studio’s services.

3. Purposes of processing

The personal data collected will be processed for the following purposes:

3.1. Handling of enquiries and requests

Managing and responding to enquiries sent through the website forms, email, telephone or enabled messaging channels.

3.2. Initial assessment of projects

Analyzing the information provided by interested parties about architecture, interior design, renovation, construction and furnishing projects.

This purpose includes studying the needs raised, assessing the possible scope of the project and contacting the interested party to request additional information or present a service proposal.

3.3. Management of professional and contractual relationships

Where a contractual relationship exists, managing the provision of services, professional communications, quotes, project-related documentation and the corresponding administrative or legal obligations.

3.4. Commercial communications

Sending commercial information about the studio’s services, projects or news only where there is a legal basis that allows it, in particular the prior consent of the interested party where required.

Users may object to these communications or withdraw their consent at any time.

Completing the contact form does not in itself constitute acceptance of commercial communications.

3.5. Website operation and security

Ensuring the proper functioning of the website, preventing unauthorized access, detecting technical incidents and protecting IT systems.

3.6. Statistical analysis of the website

Analyzing visits and use of the website through tools such as Google Analytics, in order to understand general browsing behavior and improve the user experience.

The use of analytics cookies that are not exempt from consent will be subject to the user’s prior authorization.

4. Legal basis for processing

The legal bases that legitimize the processing of personal data are as follows:

Where processing is based on consent, it may be withdrawn at any time, without affecting the lawfulness of processing carried out previously.

5. Mandatory nature of the data

Fields marked as mandatory in the forms must be completed in order to process requests properly.

The contact form may request, among other things, name, mobile phone number and email address as data necessary to handle an enquiry.

Failure to provide essential information could prevent C+C Estudio from properly handling the request.

Optional fields allow additional information to be provided to facilitate the initial assessment of the project.

The user guarantees that the information provided is truthful and up to date.

6. Retention periods

Personal data will be kept only for the time necessary to fulfil the purposes for which it was collected.

In general, the following criteria will apply:

Once the corresponding periods have elapsed, the data will be deleted or, where appropriate, blocked for the legally required periods.

7. Recipients of personal data

Personal data will not be sold to third parties.

Certain data may be accessed by service providers that collaborate with C+C Estudio and whose involvement is necessary for the operation of the website or the management of its activities.

These providers may include:

Where the project requires the involvement of another company in the corporate group, the communication of data must have an adequate legal basis and be carried out with the corresponding information provided to the data subject.

Providers acting as data processors will be subject to the applicable contractual data protection obligations.

Personal data may also be disclosed to public administrations, authorities and competent bodies where there is a legal obligation.

8. International data transfers

The use of certain external technology services may involve the processing of, or access to, personal data from countries outside the European Economic Area.

In particular, certain services from Google, Meta or other technology providers may involve international data transfers.

Where such transfers take place, they must be carried out in accordance with the mechanisms provided for in the GDPR, such as European Commission adequacy decisions or standard contractual clauses, as applicable to each provider and processing activity.

Data subjects may request additional information about the transfers affecting their data and the safeguards applied by contacting info@cycestudio.com.

9. User rights

Users may exercise the following rights, under the terms established by current legislation:

To exercise these rights, the data subject may send a request to:

info@cycestudio.com

They may also send it in writing to the controller’s address indicated in this policy.

The request must allow the data subject to be identified and specify the right they wish to exercise. Where there are reasonable doubts about their identity, the controller may request additional information proportionate to that purpose.

The exercise of these rights will be free of charge under the terms established by law.

If the data subject considers that their rights have not been adequately addressed, they may lodge a complaint with the Spanish Data Protection Agency (AEPD) through its official website:

https://www.aepd.es/

10. Security and confidentiality

C+C Estudio will adopt appropriate technical and organizational measures to protect personal data against destruction, loss, alteration, disclosure or unauthorized access.

These measures will be determined taking into account the nature of the data processed, the characteristics of the processing and the existing risks.

Access to personal information will be limited to the people and providers who need to know it to perform their duties, subject to the corresponding confidentiality obligations.

11. Cookies and analytics tools

The website uses technologies for storing and retrieving information, including cookies necessary for its operation.

It may also use Google Analytics to obtain statistical information about visits and the use of the different sections of the website.

Where these technologies require consent, their use will be subject to the preferences expressed by the user.

Detailed information on the cookies used, their providers, purposes, duration and management options will be available in the Cookie Policy.

Users may change their preferences through the configuration mechanism available on the website.

12. Social networks and external channels

C+C Estudio has communication channels and profiles on third-party platforms, such as Instagram, LinkedIn, Facebook and WhatsApp Business.

When the user voluntarily contacts the studio through these services, their data may be processed for the purpose of responding to the communication and handling their request.

Processing carried out directly by the external platforms will also be governed by the respective privacy policies of their providers.

We recommend reviewing those policies before using their services.

13. Minors

The professional services offered through the website are mainly aimed at adults and at representatives of companies or organizations.

The website is not intended to knowingly collect personal data from minors.

If it is detected that data from minors has been received without the necessary legal basis, appropriate measures will be taken in accordance with the applicable regulations.

14. Automated decisions

Submitting enquiries or requests through the contact form does not, in itself, entail decisions based solely on automated processing that produce legal effects on the data subject or similarly significantly affect them.

The professional assessment of projects is carried out on the basis of the information provided and the studio’s technical and commercial criteria.

15. Changes to the privacy policy

C+C Estudio may update this Privacy Policy when necessary to reflect regulatory changes, changes in data processing or the introduction of new services and features.

The updated version will be available on this same page, indicating the date of its last modification.

Where changes substantially affect the processing carried out, data subjects will be informed and new consent will be requested if legally necessary.

16. Contact

For any query regarding this Privacy Policy or the processing of personal data, users may contact C+C Estudio by:

Privacy overview

This website uses cookies so that we can offer you the best possible user experience. Cookie information is stored in your browser and performs functions such as recognizing you when you return to our website and helping our team understand which sections of the website you find most interesting and useful.