Privacy Policy

This Privacy Policy explains how Natalia Vysotskaya (the "data controller") collects and uses personal data provided through interiordesignmallorca.com, in compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the protection of personal data (LOPDGDD).

1. Data controller

Data controller: Natalia Vysotskaya. Primary contact for privacy matters: info@interiordesignmallorca.com. You may contact the data controller at any time to exercise the rights described in section 6.

2. What personal data is collected

When you request the private dossier: your email address. If you tick the optional "keep me in the loop" box, that choice is recorded, so that occasional studio news reaches only those who asked for it.

When you send a private enquiry: your first name, your email address, your telephone number if you choose to give one (the field is optional, and it is used only to reply to you), and whatever you choose to share in the free-text field (for example location, stage, scope). That field is used only to reply in a considered way. Please include only what you are comfortable sharing at a first contact.

For both forms, the time of submission and the approximate source on the site are also recorded (for example "inline form", "pop-up" or "private enquiry form"), to show which part of the site is useful.

Automatically, if you accept analytics cookies: pseudonymous identifiers, device and browser information, referring URL, page views, and events as described in the Cookie Policy. Without analytics consent, no personally identifying information is collected automatically.

Special categories of data (health, political opinions and the like) are not collected, and no attempt is made to identify you beyond what you have voluntarily provided.

3. Why your data is used (legal basis)

• Responding to your enquiry and sending the requested dossier. Legal basis: your consent (Art. 6.1.a GDPR).
• Occasional follow-up emails about new work and relevant editorial notes. Legal basis: your consent, given by ticking the optional opt-in box on the form. You may withdraw consent at any time with the unsubscribe link in every email.
• Understanding traffic on the site (analytics, advertising measurement). Legal basis: your consent granted in the cookie banner.
• Security and legal obligations. Legal basis: legitimate interest and legal obligation (Art. 6.1.f and 6.1.c).

4. How long your data is kept

Subscriber data is kept as long as you wish to hear from the studio. If you unsubscribe, you are removed from active lists within 30 days, and a minimal suppression record is kept so you are not re-added.

Analytics data is retained per the settings of Google Analytics 4 (14 months by default).

5. Processors and international transfers

The following processors are used:

• Brevo (sendinblue.com). Transactional and marketing email, and storage of subscriber records (name, email, form notes, submission metadata). Servers in the EU. See Brevo's privacy policy. Emails from the studio may be sent from the technical sending domain interiordesignmajorca.com, operated by the same data controller. Replying to any such email reaches Natalia directly.
• Google Ireland Ltd. Google Analytics 4, Google Ads, Google Tag Manager. Transfers to the US are covered by the EU-US Data Privacy Framework adequacy decision.
• Hotjar Ltd. Aggregated measurement of how pages are used, through session recording and heatmaps. See Hotjar's privacy policy.
• ClickCease. Detection of fraudulent and automated clicks on the studio's Google Ads, so that advertising is not charged for traffic that is not a person. See ClickCease's privacy policy.
• Hetzner Online GmbH (Germany). Hosting provider for the static site and form proxy.
• Calendly LLC. Appointment scheduling, only invoked when you click "Book a conversation."

6. Your rights

Under GDPR you have the right to access, rectify, delete, restrict and port your data, and to object to certain processing. Please write to info@interiordesignmallorca.com and a response will follow within one month.

You also have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe your rights have been breached.

7. Security

Data in transit is encrypted (TLS). The site does not store personal data in its own database. Submissions are forwarded to Brevo. API keys are kept outside the public webroot and never reach the browser.

8. Changes to this policy

This policy may be updated from time to time. The latest date of revision is indicated at the top of the page.