Privacy policy

What data of yours we process, what for, how long we keep it and what you can do about it. Straight to the point.

Last updated: 2 October 2026

This English version is provided for information purposes only. The legally valid texts are those written in Spanish, which shall prevail in the event of any discrepancy.

1. Who is responsible for your data

Data controller
Daniel Alejandro Hernández Llerena
Trade name
Harmo
Tax ID (NIF)
45366923K
Address
C. Salvador Cuyás, 19, local derecha, Las Palmas de Gran Canaria
Email
harmoestudio@gmail.com

We have not appointed a data protection officer: you can write directly to the email address above about anything related to your data.

2. What data we process and why

Requests through the website

Data
Name, phone number, island of residence and your answers about the status of your project. Technical data about the request itself is recorded alongside them: the page, section and language version of the website from which the form was opened and, if you come from a campaign, the source parameters in the URL.
Purpose
To contact you, understand your project and give you an answer or guidance.
Legal basis
Taking steps at the request of the data subject prior to entering into a contract (art. 6.1.b GDPR).
Retention
1 year from the last contact, if you do not go on to hire us.

Studio and project clients

Data
In addition to the above: email address, property address, photographs and plans of the space, and billing details.
Purpose
To prepare the study, draw up the quote, manufacture, coordinate the installation and meet our accounting and tax obligations.
Legal basis
Performance of a contract (art. 6.1.b GDPR) and compliance with legal obligations (art. 6.1.c GDPR).
Retention
For the duration of the relationship and, afterwards, 6 years under article 30 of the Spanish Commercial Code. After that period, the data is blocked before being deleted.

Browsing the site

Data
Technical data generated by any visit: IP address, browser type and pages requested, logged by our hosting provider.
Purpose
To keep the site running, resolve incidents and protect it against abuse.
Legal basis
Legitimate interest in the security and proper functioning of the site (art. 6.1.f GDPR).
Retention
For as long as the hosting provider keeps them in its technical logs.

3. Analytics and advertising

At present this site does not use any analytics or advertising tools: there is no Google Analytics, no social media pixels and no cross-site tracking. If we add them in the future, we will update this policy and ask for your prior consent through a cookie notice before activating them.

4. Who we share your data with

We do not sell or transfer your data to third parties. Only the providers we need to deliver the service have access to it. They act as data processors and are contractually bound to process it solely on our instructions:

  • Typeform — runs the request form and stores the answers.
  • Vercel — hosts the website and generates the technical browsing logs.
  • The installers and suppliers involved in your project, to whom we only pass on the data strictly needed to carry it out.
  • Our accountants, the tax authorities and financial institutions, when a legal obligation requires it.

5. International transfers

Typeform and Vercel are providers with infrastructure in the United States, so the data you give us through the form and the technical browsing logs may be processed outside the European Economic Area. These transfers rely on the mechanisms provided for in Chapter V of the GDPR —the European Commission’s standard contractual clauses or certification under the EU-US Data Privacy Framework— as set out in the processing agreements signed with each provider. You can ask us for information about these safeguards by writing to harmoestudio@gmail.com.

6. Other people's data

If you give us someone else’s data —for example, your partner’s phone number or that of whoever will meet us at the visit— it is your responsibility to have told them about this policy beforehand. We will process that data for the same purpose and for the same periods.

7. Your rights

You can exercise the following rights at any time, free of charge, by writing to harmoestudio@gmail.com and stating which one you wish to exercise. We may ask you to prove your identity.

  • Access: find out what data of yours we process.
  • Rectification: correct any inaccurate data.
  • Erasure: ask us to delete it when it is no longer needed.
  • Objection and restriction: object to a specific processing activity or ask us to restrict it while a complaint is being resolved.
  • Portability: receive your data in a structured, commonly used format.

We will reply within one month at most. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es), the competent supervisory authority in Spain.

8. Security and accuracy of data

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration, taking into account the state of the art and the nature of the information we handle.

The data you give us must be true and up to date. If it changes, please let us know.

9. Minors

Our services are aimed at adults. We do not knowingly collect data from minors. If we find that we have received a minor’s data without the authorisation of their parents or guardians, we will delete it.

10. Changes to this policy

We may update this policy when the processing we carry out, the providers we use or the applicable law change. The version in force is always the one published on this page, with its update date at the top. If the change is substantial, we will let you know through an appropriate channel.

See also the legal notice, of which this policy forms an integral part.