Privacy Policy

This Privacy Policy explains how Luz Quietud ("we", "us") collects, uses and protects personal data when you visit our website or contact us about architectural lighting design services in Madrid, Spain.

Data Controller

The data controller is Luz Quietud, Calle de Serrano 45, 28001 Madrid, Spain.

Email: [email protected]
Phone: +34 91 576 3340

Applicable Law

We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR), Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights (LOPDGDD), and other applicable Spanish and European data protection legislation.

Personal Data We Collect

We may collect:

• Identity and contact data: name, email address, phone number, billing address and Madrid district or barrio
• Project data: floor plans, room dimensions, site photographs, ceiling types, existing electrical circuits, fixture preferences, dimming requirements and comunidad de propietarios contact details where relevant
• Communication data: messages sent via forms, email, phone or in-studio consultations
• Payment data: transaction references processed by our payment provider (we do not store full card numbers)
• Technical data: IP address, browser type, device information, pages visited, referral source and session identifiers (via cookies where enabled)
• Marketing preferences: opt-in status for studio news or project updates

Purposes and Legal Basis

We process personal data on the following bases under GDPR Article 6:

• Contract / pre-contract steps (Art. 6(1)(b)): preparing quotes, conducting on-site lighting reviews, delivering lighting plans, coordinating with electricians and managing aftercare
• Legitimate interests (Art. 6(1)(f)): responding to enquiries, improving our services and website, preventing fraud and securing our systems—balanced against your rights and freedoms
• Legal obligation (Art. 6(1)(c)): accounting, invoicing, tax and regulatory requirements under Spanish law including retention obligations under the Código de Comercio
• Consent (Art. 6(1)(a)): non-essential cookies, optional marketing communications and photography consent for portfolio use

Cookies and Similar Technologies

Our website uses necessary cookies for basic operation. Analytics or preference cookies, if introduced, run only with your consent where required under the ePrivacy Directive and Spanish implementation. See our Cookies page for categories, retention periods and how to withdraw consent.

Data Retention

Enquiry and quote data is kept for up to 24 months after the last meaningful contact unless an active client relationship continues. Lighting plans, fixture schedules and site review notes are retained for 36 months after project completion. Contracts, invoices and related correspondence are retained for the period required by Spanish commercial and tax law (typically 6 years). Marketing consent records are kept until you withdraw consent plus a short audit period. Technical logs may be retained for up to 12 months for security purposes.

Who We Share Data With

We share personal data only as needed with:

• Hosting, email and form processing providers acting as processors under Article 28 GDPR data processing agreements
• Payment service providers for card and bank transactions
• Electricians, contractors and interior designers collaborating on your project where access to your address or plans is required
• Professional advisors (accountant, legal counsel) where necessary
• Public authorities when legally obliged under Spanish law

We do not sell personal data. We do not use automated decision-making that produces legal or similarly significant effects within the meaning of GDPR Article 22.

International Transfers

Where tools or hosts process data outside the European Economic Area, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, supplementary measures where required by CJEU case law, or rely on an adequacy decision. You may request details of transfers relevant to your data by contacting us at [email protected].

Security

We apply technical and organisational measures proportionate to the risk, including access controls on studio systems, encrypted transmission (TLS) where available, staff confidentiality obligations and limited access to client project files. No method of transmission over the internet is completely secure; please avoid sending unnecessary sensitive data by unencrypted email.

Your Rights

Under the GDPR and LOPDGDD, depending on circumstances, you may have the right to:

• Access your personal data and obtain a copy (GDPR Art. 15)
• Rectify inaccurate or incomplete data (GDPR Art. 16)
• Erase data in certain cases, such as where it is no longer necessary (GDPR Art. 17 — "right to be forgotten")
• Restrict processing in defined situations (GDPR Art. 18)
• Data portability for data you provided, where processing is automated and based on contract or consent (GDPR Art. 20)
• Object to processing based on legitimate interests or for direct marketing (GDPR Art. 21)
• Withdraw consent at any time without affecting prior lawful processing (GDPR Art. 7(3))
• Not be subject to solely automated decisions with significant effects, where applicable (GDPR Art. 22)

To exercise these rights, contact [email protected]. We respond within one month, extendable by two further months where requests are complex or numerous. We may need to verify your identity before disclosing data.

Children

Our services are directed at adults. We do not knowingly collect data from children under 14 without parental or guardian consent as required under LOPDGDD Article 7. Contact us if you believe we have received such data.

Complaints

If you believe your data protection rights have been infringed, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) at www.aepd.es, or with the supervisory authority in your EU country of residence if you are not in Spain. We encourage you to contact us first so we can address your concern promptly.

Changes to This Policy

We may update this Privacy Policy to reflect legal or operational changes. The "Last updated" date at the top will change accordingly. Material changes may be communicated via email to active clients or a notice on this page.

Questions: [email protected]