Last updated: November 3, 2026
1. Data controller
In accordance with Regulation (EU) 2016/679, General Data Protection Regulation (GDPR), and Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), users are informed that the personal data provided through this website will be processed by:
- Controller: C&C 360 GROUP, S.L.
- Trade name: C+C Estudio.
- Tax ID (NIF): B56713738.
- Address: Calle Juan de la Cierva, 50, bajo, despacho 1, 03203 Elche, Alicante, Spain.
- Email: info@cycestudio.com.
- Website: https://cycestudio.com/.
The controller undertakes to process personal data lawfully, fairly and transparently, applying appropriate technical and organizational measures to guarantee its security and confidentiality.
2. Personal data we collect
The following categories of personal data may be collected through the C+C Estudio website:
Identification and contact data
- First and last name.
- Email address.
- Mobile phone number.
- Country of residence.
- Contact information voluntarily provided by the user.
Data related to project requests
- Services requested.
- Type and characteristics of the project.
- Estimated investment range.
- Information included in the descriptions submitted through the form.
- Any other data voluntarily provided during communications with the studio.
Technical and browsing data
- IP address.
- Information about the browser and device used.
- Technical data necessary for the operation and security of the website.
- Information about use and browsing, where applicable and in accordance with the user’s cookie preferences.
We recommend not including in the forms any especially sensitive data that is not necessary to request information about the studio’s services.
3. Purposes of processing
The personal data collected will be processed for the following purposes:
3.1. Handling of enquiries and requests
Managing and responding to enquiries sent through the website forms, email, telephone or enabled messaging channels.
3.2. Initial assessment of projects
Analyzing the information provided by interested parties about architecture, interior design, renovation, construction and furnishing projects.
This purpose includes studying the needs raised, assessing the possible scope of the project and contacting the interested party to request additional information or present a service proposal.
3.3. Management of professional and contractual relationships
Where a contractual relationship exists, managing the provision of services, professional communications, quotes, project-related documentation and the corresponding administrative or legal obligations.
3.4. Commercial communications
Sending commercial information about the studio’s services, projects or news only where there is a legal basis that allows it, in particular the prior consent of the interested party where required.
Users may object to these communications or withdraw their consent at any time.
Completing the contact form does not in itself constitute acceptance of commercial communications.
3.5. Website operation and security
Ensuring the proper functioning of the website, preventing unauthorized access, detecting technical incidents and protecting IT systems.
3.6. Statistical analysis of the website
Analyzing visits and use of the website through tools such as Google Analytics, in order to understand general browsing behavior and improve the user experience.
The use of analytics cookies that are not exempt from consent will be subject to the user’s prior authorization.
4. Legal basis for processing
The legal bases that legitimize the processing of personal data are as follows:
- Application of pre-contractual measures and performance of a contract (Article 6.1.b GDPR): to manage information requests, analyze project proposals and develop contractual relationships requested by interested parties.
- Compliance with legal obligations (Article 6.1.c GDPR): to meet tax, accounting, administrative or any other applicable legal requirements.
- Legitimate interest (Article 6.1.f GDPR): to ensure the security of the website, prevent fraudulent activities and manage certain professional communications, provided that the fundamental rights and freedoms of the data subjects do not override them.
- Consent (Article 6.1.a GDPR): for processing that requires it, such as the use of analytics cookies or the sending of certain commercial communications.
Where processing is based on consent, it may be withdrawn at any time, without affecting the lawfulness of processing carried out previously.
5. Mandatory nature of the data
Fields marked as mandatory in the forms must be completed in order to process requests properly.
The contact form may request, among other things, name, mobile phone number and email address as data necessary to handle an enquiry.
Failure to provide essential information could prevent C+C Estudio from properly handling the request.
Optional fields allow additional information to be provided to facilitate the initial assessment of the project.
The user guarantees that the information provided is truthful and up to date.
6. Retention periods
Personal data will be kept only for the time necessary to fulfil the purposes for which it was collected.
In general, the following criteria will apply:
- Enquiries and project requests: for the time necessary to handle the request and, once completed, for the period reasonably necessary to address possible liabilities. For requests that do not result in an engagement, a maximum period of 12 months from the last interaction is established as a general criterion, unless justified by legal necessity.
- Client data and contractual relationships: for the duration of the professional relationship and, afterwards, for the applicable legal retention and limitation periods.
- Commercial communications based on consent: for as long as the data subject maintains that consent or until they request to stop receiving them.
- Technical and security data: for the periods necessary to maintain the security and operation of the website.
- Cookies and analytics data: in accordance with the durations and conditions indicated in the Cookie Policy.
Once the corresponding periods have elapsed, the data will be deleted or, where appropriate, blocked for the legally required periods.
7. Recipients of personal data
Personal data will not be sold to third parties.
Certain data may be accessed by service providers that collaborate with C+C Estudio and whose involvement is necessary for the operation of the website or the management of its activities.
These providers may include:
- Web hosting and IT maintenance providers.
- Email and communications services.
- Administrative, document and project management tools.
- Statistical analysis providers, where the corresponding legal basis exists.
- Collaborating professionals or companies whose participation is necessary to process or carry out a project.
Where the project requires the involvement of another company in the corporate group, the communication of data must have an adequate legal basis and be carried out with the corresponding information provided to the data subject.
Providers acting as data processors will be subject to the applicable contractual data protection obligations.
Personal data may also be disclosed to public administrations, authorities and competent bodies where there is a legal obligation.
8. International data transfers
The use of certain external technology services may involve the processing of, or access to, personal data from countries outside the European Economic Area.
In particular, certain services from Google, Meta or other technology providers may involve international data transfers.
Where such transfers take place, they must be carried out in accordance with the mechanisms provided for in the GDPR, such as European Commission adequacy decisions or standard contractual clauses, as applicable to each provider and processing activity.
Data subjects may request additional information about the transfers affecting their data and the safeguards applied by contacting info@cycestudio.com.
9. User rights
Users may exercise the following rights, under the terms established by current legislation:
- Access: to know whether their personal data is being processed and to obtain information about that processing.
- Rectification: to request the correction of inaccurate or incomplete data.
- Erasure: to request the deletion of their data when the legal requirements are met.
- Objection: to object to certain processing of their personal data.
- Restriction of processing: to request that processing be restricted in the cases provided for by law.
- Portability: to receive the personal data provided in a structured, commonly used and machine-readable format, where applicable.
- Withdrawal of consent: to withdraw, at any time, the consent given for specific processing.
To exercise these rights, the data subject may send a request to:
They may also send it in writing to the controller’s address indicated in this policy.
The request must allow the data subject to be identified and specify the right they wish to exercise. Where there are reasonable doubts about their identity, the controller may request additional information proportionate to that purpose.
The exercise of these rights will be free of charge under the terms established by law.
If the data subject considers that their rights have not been adequately addressed, they may lodge a complaint with the Spanish Data Protection Agency (AEPD) through its official website:
10. Security and confidentiality
C+C Estudio will adopt appropriate technical and organizational measures to protect personal data against destruction, loss, alteration, disclosure or unauthorized access.
These measures will be determined taking into account the nature of the data processed, the characteristics of the processing and the existing risks.
Access to personal information will be limited to the people and providers who need to know it to perform their duties, subject to the corresponding confidentiality obligations.
11. Cookies and analytics tools
The website uses technologies for storing and retrieving information, including cookies necessary for its operation.
It may also use Google Analytics to obtain statistical information about visits and the use of the different sections of the website.
Where these technologies require consent, their use will be subject to the preferences expressed by the user.
Detailed information on the cookies used, their providers, purposes, duration and management options will be available in the Cookie Policy.
Users may change their preferences through the configuration mechanism available on the website.
12. Social networks and external channels
C+C Estudio has communication channels and profiles on third-party platforms, such as Instagram, LinkedIn, Facebook and WhatsApp Business.
When the user voluntarily contacts the studio through these services, their data may be processed for the purpose of responding to the communication and handling their request.
Processing carried out directly by the external platforms will also be governed by the respective privacy policies of their providers.
We recommend reviewing those policies before using their services.
13. Minors
The professional services offered through the website are mainly aimed at adults and at representatives of companies or organizations.
The website is not intended to knowingly collect personal data from minors.
If it is detected that data from minors has been received without the necessary legal basis, appropriate measures will be taken in accordance with the applicable regulations.
14. Automated decisions
Submitting enquiries or requests through the contact form does not, in itself, entail decisions based solely on automated processing that produce legal effects on the data subject or similarly significantly affect them.
The professional assessment of projects is carried out on the basis of the information provided and the studio’s technical and commercial criteria.
15. Changes to the privacy policy
C+C Estudio may update this Privacy Policy when necessary to reflect regulatory changes, changes in data processing or the introduction of new services and features.
The updated version will be available on this same page, indicating the date of its last modification.
Where changes substantially affect the processing carried out, data subjects will be informed and new consent will be requested if legally necessary.
16. Contact
For any query regarding this Privacy Policy or the processing of personal data, users may contact C+C Estudio by:
- Email: info@cycestudio.com
- Address: Calle Juan de la Cierva, 50, bajo, despacho 1, 03203 Elche, Alicante, Spain.
- Website: https://cycestudio.com/