1. Data controller
- Controller: Construcciones Dasan 2007, S.L.
- Tax ID (CIF): B10737443
- Address: Calle Colquide 6, portal 2, 3.º E · 28231 Las Rozas de Madrid · Madrid
- Data protection contact: contacto@grupodasan.es
2. Purpose of processing
We process your personal data in order to:
- Respond to enquiries and requests for information submitted through the contact form.
- Send commercial information about our services, promotions and experiences, solely if you expressly request it.
- Manage the contractual or pre-contractual relationship arising from the interest shown by the user.
3. Legal basis
The legal basis for processing is the express consent given by the user when completing the form, as well as the performance of pre-contractual or contractual measures requested by the data subject (art. 6.1.a and 6.1.b of the GDPR).
4. Categories of data
We process the identification and contact data provided by the user: name, email address, telephone number and the content of the enquiry. No special categories of data are processed.
5. Retention
Your data will be kept for the time strictly necessary for the purpose for which it was collected and, where applicable, for the legal periods required to address any potential liabilities. If the relationship does not result in a contract, the data will be deleted twelve months after the last interaction.
6. Recipients and transfers
Your data will not be disclosed to third parties except where legally required. The website hosting, the form and the first hop of the email are located on a server in Spain, whose provider acts as a data processor under contract.
Email is the exception, and it does involve an international transfer. Messages sent to contacto@grupodasan.es are first delivered to our server, located in Spain, and from there they are forwarded to the account used to handle the studio's day-to-day correspondence, which is hosted on Gmail (Google). That forwarding carries your data to the United States.
This transfer is covered by the European Commission adequacy decision of 10 July 2023 on the EU-U.S. Data Privacy Framework (Implementing Decision (EU) 2023/1795), to which Google LLC adheres according to the official list of the U.S. Department of Commerce. Should that decision cease to be in force, the transfer would be covered by the standard contractual clauses under article 46.2.c of the GDPR. Apart from this, no other international transfer takes place.
7. Rights of the data subject
You may exercise your rights of access, rectification, erasure, restriction, objection and portability at any time, and withdraw the consent you have given, by sending a written request to contacto@grupodasan.es stating "Data protection" in the subject line and enclosing a copy of an identity document.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that the processing does not comply with current regulations.
8. Security
We have adopted the appropriate technical and organisational measures to guarantee the security of personal data and to prevent its alteration, loss or unauthorised processing, taking into account the state of the art.
9. Conversational chatbot
Our website offers an automated conversational assistant (chatbot) that uses the language processing service of Anthropic PBC (United States, a data processor with adequate safeguards pursuant to art. 46 GDPR).
When you interact with the chatbot, we store the following data for a maximum of 60 days for quality control and service improvement purposes:
- The content of the messages you write and the responses the bot returns to you.
- An internal conversation identifier (UUID) generated in your browser.
- A cryptographic hash of your IP address (pseudonymised, non-reversible).
- Your browser (user-agent string) and the date and time of each turn.
Legal basis: the controller's legitimate interest in ensuring the quality and security of the automated assistant (art. 6.1.f GDPR). We do not use these conversations for profiling or for automated decisions with legal effects.
Do not enter sensitive personal data (national ID number, IBAN, passwords, health data) into the chatbot. If you do so by mistake, please contact us so that we can delete it.
You may request the deletion of the conversations associated with your browser by writing to contacto@grupodasan.es and stating "Chatbot deletion" in the subject line. After 60 days, conversations are deleted automatically.
10. Audience measurement
This website counts its visits with an audience measurement tool hosted on the infrastructure contracted by Construcciones Dasan 2007, S.L. itself, on a server located in Spain. The tool does not install cookies.
- What is read from the browser: when each page is opened, a small program reads the address of the page without anything after the "?", the page you came from if you arrived through a link (also without anything after the "?") and the screen size, and sends this to the server.
- What is inferred on the server: the browser, the operating system and the type of device, from the technical data that any browser sends, and the approximate city from the IP address. The tool does not store the IP address.
- How the same visit is not counted twice: the tool calculates a pseudonymous code that changes every month and cannot be used on any other website. While the page is open, it also keeps a session code in the browser's memory, which disappears when the page is closed. Neither of them can be used to find out who you are.
- Purpose: to obtain statistics about this website, which are aggregated figures, in order to know which content is of most interest. The data is not combined with other data or disclosed to third parties.
- Legal basis: the controller's legitimate interest in knowing how its website is used (art. 6.1.f GDPR).
- Why consent is not requested: the measurement is limited to what the Spanish Data Protection Agency (AEPD) considers strictly necessary to manage a website (guide "Uso de cookies para herramientas de medición de audiencia", January 2024), which exempts it from the consent required by article 22.2 of Law 34/2002.
- Data processor: the company that maintains the website, which manages the tool on behalf of Construcciones Dasan 2007, S.L.
- Retention period: a maximum of 25 months.
- Objection: you may object to this measurement by writing to contacto@grupodasan.es.
11. Server logs
Like any web server, the one hosting this site records every request it receives: date and time, page requested, IP address and browser. These logs are used to diagnose faults and detect attacks, are kept for a limited time and are not combined with any other data. The legal basis is the controller's legitimate interest in keeping the site secure (art. 6.1.f GDPR).