Privacy policy
What data of yours we process, what for, how long we keep it and what you can do about it. Straight to the point.
Last updated: 2 October 2026
This English version is provided for information purposes only. The legally valid texts are those written in Spanish, which shall prevail in the event of any discrepancy.
1. Who is responsible for your data
- Data controller
- Daniel Alejandro Hernández Llerena
- Trade name
- Harmo
- Tax ID (NIF)
- 45366923K
- Address
- C. Salvador Cuyás, 19, local derecha, Las Palmas de Gran Canaria
- harmoestudio@gmail.com
We have not appointed a data protection officer: you can write directly to the email address above about anything related to your data.
2. What data we process and why
Requests through the website
- Data
- Name, phone number, island of residence and your answers about the status of your project. Technical data about the request itself is recorded alongside them: the page, section and language version of the website from which the form was opened and, if you come from a campaign, the source parameters in the URL.
- Purpose
- To contact you, understand your project and give you an answer or guidance.
- Legal basis
- Taking steps at the request of the data subject prior to entering into a contract (art. 6.1.b GDPR).
- Retention
- 1 year from the last contact, if you do not go on to hire us.
Studio and project clients
- Data
- In addition to the above: email address, property address, photographs and plans of the space, and billing details.
- Purpose
- To prepare the study, draw up the quote, manufacture, coordinate the installation and meet our accounting and tax obligations.
- Legal basis
- Performance of a contract (art. 6.1.b GDPR) and compliance with legal obligations (art. 6.1.c GDPR).
- Retention
- For the duration of the relationship and, afterwards, 6 years under article 30 of the Spanish Commercial Code. After that period, the data is blocked before being deleted.
Browsing the site
- Data
- Technical data generated by any visit: IP address, browser type and pages requested, logged by our hosting provider.
- Purpose
- To keep the site running, resolve incidents and protect it against abuse.
- Legal basis
- Legitimate interest in the security and proper functioning of the site (art. 6.1.f GDPR).
- Retention
- For as long as the hosting provider keeps them in its technical logs.
3. Analytics and advertising
At present this site does not use any analytics or advertising tools: there is no Google Analytics, no social media pixels and no cross-site tracking. If we add them in the future, we will update this policy and ask for your prior consent through a cookie notice before activating them.
4. Who we share your data with
We do not sell or transfer your data to third parties. Only the providers we need to deliver the service have access to it. They act as data processors and are contractually bound to process it solely on our instructions:
- Typeform — runs the request form and stores the answers.
- Vercel — hosts the website and generates the technical browsing logs.
- The installers and suppliers involved in your project, to whom we only pass on the data strictly needed to carry it out.
- Our accountants, the tax authorities and financial institutions, when a legal obligation requires it.
5. International transfers
Typeform and Vercel are providers with infrastructure in the United States, so the data you give us through the form and the technical browsing logs may be processed outside the European Economic Area. These transfers rely on the mechanisms provided for in Chapter V of the GDPR —the European Commission’s standard contractual clauses or certification under the EU-US Data Privacy Framework— as set out in the processing agreements signed with each provider. You can ask us for information about these safeguards by writing to harmoestudio@gmail.com.
6. Other people's data
If you give us someone else’s data —for example, your partner’s phone number or that of whoever will meet us at the visit— it is your responsibility to have told them about this policy beforehand. We will process that data for the same purpose and for the same periods.
7. Your rights
You can exercise the following rights at any time, free of charge, by writing to harmoestudio@gmail.com and stating which one you wish to exercise. We may ask you to prove your identity.
- Access: find out what data of yours we process.
- Rectification: correct any inaccurate data.
- Erasure: ask us to delete it when it is no longer needed.
- Objection and restriction: object to a specific processing activity or ask us to restrict it while a complaint is being resolved.
- Portability: receive your data in a structured, commonly used format.
We will reply within one month at most. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es), the competent supervisory authority in Spain.
8. Security and accuracy of data
We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration, taking into account the state of the art and the nature of the information we handle.
The data you give us must be true and up to date. If it changes, please let us know.
9. Minors
Our services are aimed at adults. We do not knowingly collect data from minors. If we find that we have received a minor’s data without the authorisation of their parents or guardians, we will delete it.
10. Changes to this policy
We may update this policy when the processing we carry out, the providers we use or the applicable law change. The version in force is always the one published on this page, with its update date at the top. If the change is substantial, we will let you know through an appropriate channel.
See also the legal notice, of which this policy forms an integral part.