Privacy Policy

1. Controller and contact

The intended controller for the processing described in this notice is:

No data protection officer or separate privacy address is identified in the current website implementation. Please use the email address above for privacy requests unless EcoViva later confirms a dedicated contact.

2. Data we may process

• Direct contact data: your name and contact details, the content of an email or telephone enquiry, and related correspondence.
• Project-request data: information you choose to provide in an embedded request form, such as contact, property, project, budget and support-preference details, together with any other fields shown in that form.
• Technical data: information ordinarily generated when a website is delivered, such as IP address, browser or device information, requested pages, timestamps and security logs.
• Language preference: the homepage stores the selected language (English, Spanish or German) in your browser's local storage under ecoviva-lang.

Please do not submit sensitive personal data unless EcoViva specifically asks for it and has confirmed an appropriate lawful basis and handling process.

3. Why we use the data

EcoViva may use the data to answer enquiries, understand and assess a requested project or partnership, recommend an appropriate next step, prepare or discuss services, maintain business correspondence, protect the website, and meet applicable legal obligations.

The current website implementation does not include newsletter sign-up, behavioural advertising, profiling or automated decision-making.

4. Lawful bases — confirmation required

Depending on the request, the expected bases are steps requested before entering into a contract, performance of a contract, EcoViva's legitimate interests in handling business enquiries and securing its systems, and compliance with legal obligations. Consent would be needed where the law requires it, for example for optional non-essential tracking.

Before this policy becomes final, EcoViva and its legal adviser must confirm which basis applies to each purpose and document any legitimate-interest assessment or consent mechanism required.

5. Recipients and service providers

Access should be limited to EcoViva personnel and service providers who need the data for the purposes above. The current implementation confirms:

• Vercel is used to deploy and host the website.
• Fillout is loaded on certain project-request and partner-intake pages to display embedded forms.
• Unsplash hosts an image loaded by the homepage and one test intake page; fetching it may disclose ordinary request data such as an IP address.
• Email and telephone providers may be involved in direct communications, but their identities cannot be determined from this website implementation.

The current implementation does not confirm active analytics or additional automation recipients. Any such service must be assessed and added to this notice before use. Provider contracts, roles and any additional recipients require confirmation.

6. International transfers

The current implementation alone does not establish where every service provider processes data or whether an international transfer requiring disclosure or safeguards occurs. Before this draft is approved as final, EcoViva must verify provider locations, contractual roles and any transfer mechanism or safeguard that must be disclosed.

7. Retention

Personal data should be kept only for as long as needed for the relevant enquiry or project relationship and, afterwards, for the time needed to meet applicable legal obligations or deal with possible claims. The exact operational retention periods have not been confirmed; EcoViva must approve and document a retention schedule before this policy is final.

8. Your data-protection rights

Subject to applicable law, you may ask for access to, correction or deletion of your personal data; restriction of processing; data portability; or object to processing. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

Send a request to info@ecoviva-mallorca.com. EcoViva may need reasonable information to verify your identity and locate the relevant data.

9. Complaints

You may raise a concern with EcoViva first. You also have the right to lodge a complaint with the competent supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).

10. Security

EcoViva should use appropriate technical and organisational safeguards proportionate to the data and risks involved. No internet transmission or storage system can be guaranteed completely secure. The current website implementation does not document EcoViva's internal access-control, incident-response or deletion procedures; these require operational confirmation.

11. Cookies, local storage and external content

The site's own source code does not set cookies and no analytics tag or advertising pixel was found. It does use browser local storage to remember the homepage language. The site also requests an image from Unsplash, and some intake pages load a Fillout form and Fillout's embed script.

Third-party resources may process technical request data and may use their own storage technologies. Their live behaviour, cookie classification and whether consent controls are required must be checked before this notice is approved. This draft does not claim that optional analytics cookies are active.

12. Changes to this notice

EcoViva may update this notice when its website, providers or processing activities change. The current review-draft date is shown at the top of the page. Material changes should be assessed and the public notice updated before the changed processing begins where required.

13. Privacy requests

For a privacy question or rights request, email info@ecoviva-mallorca.com or write to EcoViva Mallorca SL at the address in section 1.