Privacy policy

At Nery Ortega we treat the information provided by interested parties with the utmost confidentiality and use it solely for the purposes set out below. Please read this policy carefully before providing us with any personal data.

1. Data controller

• Data controller: Nery Ortega
• Tax ID (NIF): 49250914W
• Address: Avda. de las Cortes Valencianas, 100, 03181 Torrevieja (Alicante)
• Phone: +34 661 38 15 03
• Email: web@onoclean.com
• Website: onoclean.com

It is not mandatory to appoint a data protection officer under Article 37 of the General Data Protection Regulation, so you may direct any question relating to your personal data straight to the email address shown above.

2. Data we process

We only process the data you voluntarily provide through this website's contact form, or when you get in touch with us by phone, WhatsApp or email. Specifically:

• Full name: so that we can address you correctly.
• Phone number: to reply to you or arrange the assessment visit.
• Email address: to send you our reply or the written quote.
• Message and details of the service requested: type of service, town, and any information you choose to include so that we can assess the job.

We do not request or need special categories of data (so-called sensitive data: health, ideology, religion, trade union membership, sexual orientation, biometric or genetic data). Please do not include this type of information in the message field. Nor do we knowingly collect data from anyone under fourteen years of age; if we find that a minor's data has been provided without the consent of their parents or guardians, we will delete it immediately.

The data you provide must be accurate, truthful and up to date. If you provide us with a third party's data, you take responsibility for having informed them beforehand of the content of this policy and for holding their authorisation.

3. Purpose of processing

Your data is processed for the following purposes:

• To handle the enquiry, request or information request you submit to us.
• To prepare and send you the quote for the cleaning service requested, and to carry out any necessary preliminary steps (a call, an assessment visit, or a request for photos of the space).
• To maintain the contact needed to provide the service if the quote is accepted, as well as the related administrative, accounting and tax management.

We do not build profiles or make automated decisions that produce legal effects on you. We do not use your data to send advertising or commercial newsletters unless you expressly request it.

4. Legal basis for processing

The lawfulness of processing your data rests on the following bases:

• Consent of the data subject (Article 6.1.a of the General Data Protection Regulation), which you grant by ticking the acceptance box on the form and submitting it, or by sending us your enquiry through any other means.
• Pre-contractual measures taken at the request of the data subject (Article 6.1.b), since preparing the quote is a preliminary step towards possibly contracting the service; this same basis covers performance of the contract if it is ultimately formalised.
• Compliance with legal obligations (Article 6.1.c) in commercial, accounting and tax matters once the service is actually provided and invoiced.

Withdrawing your consent at any time will not affect the lawfulness of processing carried out before that withdrawal. Providing the data marked as mandatory is necessary for us to be able to help you: if you do not provide it, we will not be able to respond to your request.

5. Retention period

We will keep your data for as long as is strictly necessary to handle your request and, where applicable, for the duration of the contractual relationship. As a general guide:

• If the enquiry does not lead to a contract, the data is kept for a maximum of twelve months from the last contact, so that we can deal with any follow-up questions, and is then deleted.
• If the service is contracted, the data is kept for the duration of the relationship and, once it ends, for the statutory limitation periods that apply to potential liabilities: six years under the Commercial Code for accounting matters, and four years under the General Tax Law.

Once these periods have elapsed, the data will be deleted or duly blocked and, ultimately, securely destroyed.

6. Recipients and data transfers

Data will not be shared with third parties except where legally required (for example, to the tax authorities, law enforcement, or the Courts, when so required).

Aside from this, certain providers access the data as data processors, solely to provide their services to OnoClean and following its instructions, under contracts that comply with Article 28 of the General Data Protection Regulation:

• Web hosting and email provider, which stores the website and the messages received through the contact form on its servers.
• Accounting firm responsible for bookkeeping and tax obligations, solely regarding billing data once a service is contracted.
• Google Ireland Limited, as the provider of the Google Analytics 4 audience measurement service, and only if you have accepted analytics cookies. This processing covers browsing data (pages visited, referral source, device type and anonymised IP address) and is not cross-referenced with the identifying data you provide in the contact form. You can find further detail and withdraw your consent in the cookie policy.

7. International transfers

The servers hosting this website and its email are located in the European Union, so the data you provide through the contact form does not leave the European Economic Area.

The one exception is browsing data processed by Google Analytics when you accept analytics cookies: Google may process it on servers located in the United States, relying on the EU-U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023) and on the standard contractual clauses approved by the Commission. If you do not want this transfer to take place, simply reject analytics cookies: in that case, measurement is never activated.

8. Rights of data subjects

Data protection law grants you the following rights, which you may exercise free of charge:

• Access: find out what data of yours we are processing and obtain a copy of it.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your data once it is no longer needed for the purpose for which it was collected, among other cases.
• Objection: object to us processing your data for reasons relating to your particular situation.
• Portability: receive your data in a structured, commonly used, machine-readable format, or request that it be transmitted to another controller.
• Restriction of processing: request that we suspend processing of your data, keeping it solely for the establishment or defence of legal claims.

You also have the right to withdraw your consent at any time and not to be subject to automated individual decisions.

8.1. How to exercise your rights

We will respond within one month of receiving your request, which may be extended by a further two months if the complexity or number of requests requires it, in which case we will inform you within the first month.

8.2. Right to lodge a complaint with the supervisory authority

If you believe that the processing of your data does not comply with the applicable regulations, or if you have not received a satisfactory response to the exercise of your rights, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), at Calle Jorge Juan 6, 28001 Madrid, or via its electronic office at www.aepd.es.

9. Security measures

Nery Ortega has adopted appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the General Data Protection Regulation, including:

• Encrypted transmission of form data via secure HTTPS protocol.
• Access to information restricted to staff who need it to handle your request, subject to a duty of confidentiality.
• Strong passwords and regular updates to server and website software.
• Backups and restoration procedures managed by the hosting provider.
• Verification that providers with access to the data offer sufficient guarantees of regulatory compliance.

In the event of a personal data breach that poses a risk to your rights and freedoms, the Spanish Data Protection Agency will be notified and, where appropriate, the affected individuals, within the legally established time limits.

10. Cookies

This website uses its own technical cookies, necessary for it to function, and Google Analytics 4 analytics cookies, which are only installed if you expressly accept them in the cookie notice. You can find the full details, retention periods and how to withdraw your consent in the cookie policy.

11. Amendment of this policy

This privacy policy may be amended to adapt it to regulatory or case-law changes, or to changes in the way we provide our services. We recommend you review it each time before providing us with your data. The applicable version is the one published on this page at the time of collection.