Privacy policy

1. Data controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Puenjer S.L.
Avinguda Mèxic 17
07007 Palma de Mallorca
Spain
Represented by: Fin Pünjer (Administrador Único)
Email: contact@puenjer.es
Phone: +34 684 774 631

2. Collection and storage of personal data

2.1 Visiting the website

When you access our website, our hosting provider processes technically necessary data:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which access is made (referrer URL)
• Browser used and, if applicable, the operating system

Processing is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in delivering the website securely and reliably and in defending against attacks.

2.2 Contact form and email enquiries

When you use our contact form or email us, we process the following data:

• Name
• Email address
• Phone number (optional)
• Company (optional)
• Service of interest (optional)
• Your message

This data is processed to handle your enquiry and contact you, based on Art. 6 (1) (b) GDPR (pre-contractual measures). Form data is not stored in a database but sent to us directly by email. Your data is deleted once your enquiry has been fully processed, unless statutory retention obligations apply.

3. Hosting and service providers

3.1 Web hosting and delivery

This website is served via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Cloudflare is certified under the EU-US Data Privacy Framework. A data processing agreement pursuant to Art. 28 GDPR is in place. More information: Cloudflare privacy policy.

3.2 Email delivery of the contact form

Form messages are delivered using the email service Resend (Resend, Inc., San Francisco, USA). Transfers to the USA are based on the European Commission’s standard contractual clauses (Art. 46 (2) (c) GDPR).

3.3 Mailbox

Incoming emails are stored in our Google Workspace mailbox (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). A data processing agreement pursuant to Art. 28 GDPR is in place with Google.

4. Cookies, tracking and external content

Our website does not set cookies and does not use any analytics, tracking or marketing services. Fonts are served from our own server; no third-party content such as Google Fonts is loaded.

5. Your rights as a data subject

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7 (3) GDPR)

To exercise your rights, please contact: contact@puenjer.es

Right to lodge a complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, Spain, www.aepd.es.

6. Data security

This website is delivered exclusively over encrypted HTTPS (TLS). We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties.

7. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always meets current legal requirements or to reflect changes to our services. The new privacy policy will then apply to your next visit.