Old House Design · C. Tío Juane, 6, 11401 Jerez de la Frontera, Cádiz, Spain
Old House Design S.L., NIF: ES-BXXXXXXXX. C. Tío Juane, 6, 11401 Jerez de la Frontera, Cádiz, Spain. Email: hola@oldhousedesign.com. Phone: +34 856 061 583.
GDPR (EU Regulation 2016/679); LOPDGDD (Ley Orgánica 3/2018); LSSI-CE (Ley 34/2002 de servicios de la sociedad de la información); AEPD (Agencia Española de Protección de Datos). Authority: aepd.es.
Contact forms: name, email, phone, company, project description. Payments: processed via Stripe (PCI DSS Level 1 compliant). We do not store card details. Website analytics: Plausible Analytics (cookieless, no personal data collected). Project work: website content, images, login credentials shared under NDA.
Consent (Art. 6(1)(a) GDPR) for contact form submissions. Contractual necessity (Art. 6(1)(b)) for project delivery. Legal obligation (Art. 6(1)(c)) for invoicing and tax compliance per Spanish tax law (Ley General Tributaria).
You have the right to: access your personal data, rectify inaccurate data, request erasure ("right to be forgotten"), restrict processing, data portability, and object to processing. To exercise any right, email hola@oldhousedesign.com. We respond within 30 calendar days. You may also file a complaint with the AEPD: aepd.es.
Client project data: duration of engagement plus 6 years (Spanish tax law requirement). Contact form submissions: 12 months. Invoices and financial records: 6 years (Ley General Tributaria). Website files and backups: 60 days after project completion unless maintenance contract is active.
HTTPS encryption on all pages. Encrypted cloud storage for project files. Two-factor authentication on all accounts. NDA signed by all team members. Breach notification within 72 hours per GDPR Article 33.
Client data is processed within the European Economic Area (EEA). Stripe processes payments under the EU-US Data Privacy Framework. No other international transfers occur.
Stripe (payment processing, US, EU-US DPF). Plausible Analytics (web analytics, EU servers). Google Workspace (email and documents, EU data residency). All processors are GDPR compliant with appropriate safeguards.
Last updated: March 2026.
Online · Jerez