Privacy Policy

1. Introduction

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, contact us, request our services, communicate with us, or apply for employment opportunities with DOMIOURG S.L., including through third-party platforms and online forms.

We are committed to protecting your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and relevant Spanish data protection legislation.

2. Our company

DOMIOURG S.L. is a company registered in Spain (company number NIF B22552012), with registered office at pasaje Pino Blanco, 8, BJ, Torremolinos, Malaga, 29620. We act as the data controller with respect to the personal data we process in the course of our business. If you have any questions about this policy or how we handle your personal data, please contact us at info@domiourggroup.com.

3. Data We Collect

We may collect the following personal data:

Name.
Email address.
Phone number.
Project details (submitted via contact form).
Technical data (IP address, browser type, device).
Communications data, including emails, messages, chat correspondence and information relating to our communications with you.
Recruitment data, including information submitted through job application forms or Meta Lead Ads, such as professional experience, qualifications, PRL training status, current location, eligibility to work in Spain, availability and preferred contact details.
Professional contact data of company representatives (name, job title, company, professional email address and telephone number), obtained from publicly accessible sources and from B2B contact database providers. See section 5.

4. How We Use Your Data

We may process your personal data for the following purposes:

To respond to your inquiries and provide quotes.
To manage and deliver construction, renovation and related services.
To communicate with you regarding your project or request.
To manage recruitment and job applications, assess candidates’ suitability for available positions, contact applicants, arrange interviews, and take steps prior to entering into an employment contract.
To improve our website and services.
To comply with applicable legal, accounting and regulatory obligations.
To address commercial communications to professionals within the scope of their professional activity (B2B prospecting). See section 5.

The legal basis for processing depends on the purpose:

Contact enquiries and quotation requests — Art. 6(1)(b) GDPR, taking steps at your request prior to entering into a contract.
Performance of contracts — Art. 6(1)(b) GDPR.
Recruitment for a current vacancy — Art. 6(1)(b) GDPR, taking pre-contractual steps at the candidate’s request.
Legal and accounting obligations — Art. 6(1)(c) GDPR.
Keeping candidates’ details for future vacancies — Art. 6(1)(a) GDPR, where the candidate has given consent.
Website analytics and non-essential cookies — Art. 6(1)(a) GDPR, where processing is based on your consent.

We only share personal data where necessary for the relevant purpose, to comply with legal obligations, or as otherwise described in this Privacy Policy.

5. Commercial contact with professionals (B2B prospecting)

5.1. Purpose. To send commercial communications to professionals and to company contact persons, within the scope of their professional activity, regarding the services of SL Domiourg and of the industrial partners it represents commercially.

5.2. Legal basis. The legitimate interest of SL Domiourg in developing its commercial activity (Art. 6(1)(f) GDPR), read together with Article 19 of Spanish Organic Law 3/2018 (LOPDGDD), which permits the processing of contact data of professionals and sole traders where the processing relates solely to the data necessary for locating them in their professional capacity and the purpose is to maintain a relationship of any kind with the undertaking for which the data subject works. A balancing assessment has been carried out between this interest and the rights of the data subject, taking into account that the processing is limited to professional data, does not affect the private sphere, and provides a straightforward mechanism for objecting.

5.3. Categories of data. Name and surname, job title or function, company or organisation, professional email address and professional telephone number.

5.4. Source of the data. The data are not obtained from the data subject, but from: (i) publicly accessible sources, such as corporate websites, sector directories, business associations, public registers and published professional profiles; and (ii) providers of B2B professional contact databases.

5.5. Recipients. Data are not disclosed to third parties for their own purposes. They may be accessed, as processors and under contract, by the email service and customer relationship management (CRM) providers used by SL Domiourg.

5.6. International transfers. Where any such provider is located outside the European Economic Area, the transfer is based on an adequacy decision of the European Commission or on Standard Contractual Clauses.

5.7. Retention period. Data will be retained for as long as the commercial interest subsists and will in any event be erased where the data subject objects to the processing, or after twelve months without any interaction.

5.8. Rights. Data subjects may exercise their rights of access, rectification, erasure, restriction, portability and objection by writing to info@domiourggroup.com. In particular, they may object at any time to receiving commercial communications, without having to give reasons and free of charge, by writing to that same address or by replying "UNSUBSCRIBE" to any of our emails. They may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

The general provisions on international transfers, retention and the exercise of rights set out in sections 9, 11 and 12 also apply.

6. Contact Forms

When you submit a request through our contact form:

Your data is used to respond to and manage your request and, where applicable, to take steps requested by you prior to entering into a contract.
We do not sell your personal data or disclose it to third parties for their own independent marketing purposes.
Your data is stored securely.

7. Cookies, Tracking and Google Analytics

We use cookies and similar technologies to:

Ensure proper website functionality.
Analyze website traffic and how visitors interact with our website using Google Analytics.
Improve user experience and our services.

Essential cookies may be used where necessary for the website to function. Where required by law, non-essential cookies, including analytics cookies, are activated only after obtaining your consent via the cookie banner.

You can accept, reject or change your cookie preferences at any time using the cookie banner.

8. Third-Party Services and Contractors

We may share your personal data with trusted third parties where necessary to provide our services, including:

Contractors and subcontractors involved in project execution.
Technical specialists (e.g., architects, engineers).
Payment service providers.
Analytics providers (e.g., Google Analytics).

All third parties are required to:

Process your data only for the agreed purpose.
Keep your data confidential.
Comply with applicable data protection laws.

We do not sell your personal data to third parties.

Meta Platforms Ireland Limited, where you submit information through Facebook or Instagram lead generation forms or communicate with us through Meta services.

Meta may process personal data independently in accordance with its own privacy terms when providing its platforms and advertising services.

Google Ireland Limited / Google LLC, where Google Workspace services, including Google Forms and Google Sheets, are used to collect, process and store information submitted through recruitment or contact forms. Google processes personal data in accordance with the applicable data processing terms and privacy safeguards.

9. International Data Transfers

Some of our service providers, including Google, Meta, Wix and WhatsApp, may process personal data outside the European Economic Area (EEA).

Where personal data is transferred to a country outside the EEA, we rely on appropriate safeguards recognised under applicable data protection law, such as adequacy decisions adopted by the European Commission, Standard Contractual Clauses (SCCs), or other legally recognised transfer mechanisms, as applicable.

Further information about international data transfers and the safeguards applied is available in the privacy and data protection documentation of the relevant service providers.

10. Automated Decision-Making

DOMIOURG S.L. does not make decisions producing legal or similarly significant effects solely through automated processing of personal data.

11. Data Retention

We retain personal data of the clients only as long as necessary:

To respond to your request.
To fulfill legal obligations.

Recruitment data: Personal data submitted in connection with a specific vacancy will be retained for the duration of the recruitment process and, where necessary, for an additional period to comply with applicable legal obligations or to establish, exercise or defend potential legal claims. After that period, the data will be deleted or anonymised, unless the candidate has separately consented to its retention for future recruitment opportunities.

Where a candidate has separately consented to being considered for future vacancies, their recruitment data may be retained for up to 12 months from the date of consent, unless the candidate withdraws their consent earlier.

12. Your Rights

Under the GDPR, where applicable, you have the right to:

Access your data.
Correct your data.
Request deletion.
Restrict processing.
Object to processing.
Data portability, where applicable.
Lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD).
Withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before consent was withdrawn.

To exercise your rights, contact us at: info@domiourggroup.com.

13. Data Security

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, disclosure or destruction. Access to personal data is limited to persons who require it for legitimate business purposes.

14. Contact Information

If you have any questions about this Privacy Policy, you can contact us:

Email: info@domiourggroup.com

Company: DOMIOURG S.L.

15. Updates

We may update this Privacy Policy from time to time.

Last updated: September 2026