Privacy policy
1. Who we are
Consio Xyph (NIF B66443322) is the data controller for personal data collected through this website and when you enquire about our café interior design services. Registered address: Carrer del Parlament 25, 08015 Barcelona. Contact: [email protected], +34 93 441 2233.
2. What data we collect
- Identity and contact: name, email, phone, postal address, company name if you provide it
- Project information: photos, floor plans, briefs, site measurements and correspondence about café interior design work
- Booking and billing: invoice details, payment records, VAT information
- Technical: IP address, browser type, pages viewed — see our Cookie policy
3. Why we use your data
We process data to respond to enquiries, provide quotes, deliver café interior design services, manage appointments, issue invoices, improve our website and comply with law. We do not sell your data to third parties for marketing.
4. Legal basis (GDPR Art. 6)
- Contract — when you hire us or request services that lead to an agreement
- Legitimate interest — answering enquiries, improving services, limited analytics with consent
- Consent — non-essential cookies and optional newsletters where offered
- Legal obligation — tax, accounting and regulatory records in Spain
5. How long we keep data
- General enquiries without a contract: up to 24 months from last contact
- Client project files: duration of project plus 5 years for warranty and liability
- Accounting records: as required by Spain law (typically 5–10 years)
- Cookie analytics: up to 14 months after consent
6. Who receives your data
Hosting providers, email services, accounting software and payment processors act as processors under contract. We may share address details with contractors you appoint when you authorise us to coordinate delivery. We do not transfer data outside the EEA unless safeguards (Standard Contractual Clauses or adequacy decision) are in place — contact us for details.
7. Security
We use encrypted connections (TLS), access controls on project files, password-protected devices and staff training. No online transmission is completely secure; avoid sending highly sensitive documents by unencrypted email if alternatives exist.
8. Your rights
You may request access, rectification, erasure, restriction, portability or object to processing. Withdraw consent for cookies anytime via browser settings or by clearing site data. Email [email protected] — we respond within one month.
9. Complaints
You may lodge a complaint with AEPD Spain. We encourage you to contact us first so we can try to resolve your concern.
10. Changes
We update this policy when practices or law change. The date at the top will be revised accordingly.