Privacy policy
This is a courtesy translation; in case of discrepancy, the Spanish version prevails.
Last updated: 3 October 2026 (Google Analytics with consent)
1. Data controller
Simur Spaces S.L. · CIF (Spanish Tax Identification Number) B19873538 · Registro Mercantil de Málaga (Málaga Commercial Registry), Hoja MA-183360 (Sheet MA-183360) · Avda. de Andalucía 31, Entreplanta (Mezzanine), 29006 Málaga (Spain) · [email protected] · +34 951 73 39 46.
2. What data we process and for what purpose
- Requests for a visit or for information (the Book a visit form, email, telephone or WhatsApp): name, company, email address and/or telephone number (either one is enough) and the content of your message, in order to arrange the visit, answer your enquiry and prepare a proposal. Legal basis: taking steps at your request prior to entering into a contract (Art. 6(1)(b) of the Reglamento General de Protección de Datos, RGPD (EU General Data Protection Regulation, GDPR)).
- Technical data from the form: when you submit the form we record the date and time and the IP address from which it is sent, for the sole purpose of preventing spam and misuse of the form. Legal basis: legitimate interest in the security of the website (Art. 6(1)(f) GDPR).
- WhatsApp (+34 617 08 18 79): this is a channel of your choosing. Conversations are end-to-end encrypted, so neither WhatsApp nor Meta can read their content, and messages are stored on the phones, not on WhatsApp's servers (except, in encrypted form, for up to 30 days if they could not be delivered). Your messages remain on the reception's business phone, which we manage for the same purposes and with the same retention periods as the form. The service is provided by WhatsApp Ireland Ltd., which processes your number and service usage data on its own account in accordance with its privacy policy.
- Clients: contact and billing details necessary to provide the contracted service and to comply with legal obligations (Art. 6(1)(b) and 6(1)(c) GDPR).
- Web analytics (only if you accept): with Google Analytics we measure, in aggregate, which pages are visited, from what type of device and from which country or approximate city, in order to improve the website. We do not use this data to identify you or for advertising: Google Signals and ad personalisation are switched off. Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 22(2) of the Spanish LSSI), which you can withdraw at any time via “Cookie settings” at the bottom of every page.
3. Retention
Requests for a visit or for information are kept for as long as the pre-contractual relationship lasts and for a maximum of one year from submission if no contract is signed; after that period they are automatically deleted from our records. Client data is kept for the duration of the contractual relationship and for the applicable statutory periods (tax and commercial).
4. Recipients and international transfers
We do not disclose your data to third parties unless required by law. We use providers acting as data processors: web hosting and email, with their servers in the European Union, and, only if you accept analytics cookies, Google Ireland Ltd. (Google Analytics), with the safeguards required by Art. 28 GDPR.
Transfers outside the European Economic Area: Google Analytics collects data from European visitors on servers located in the EU and discards the IP address before logging it, but then processes the data on Google's global infrastructure, so it may be processed in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023) and also uses standard contractual clauses. This transfer only takes place if you accept analytics cookies; if you reject them, no Google service is loaded and no data leaves the EU. All other Simur Spaces processing takes place in the EU.
If you choose to contact us via WhatsApp, WhatsApp Ireland Ltd. is the controller for its own processing of the service data (your number and usage data, never the encrypted content of the conversation) under its own policy, which includes its own safeguards for transfers within the Meta group; you can always use the form, email or telephone instead.
5. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and object to processing based on legitimate interest, by writing to [email protected] with the subject line "Protección de datos" (Data protection) and stating your name and the right you are exercising; we will reply within one month at the latest. If you consider that we have not handled your request properly, you may lodge a complaint with the Agencia Española de Protección de Datos (Spanish Data Protection Agency, AEPD).
6. Security
We apply technical and organisational measures to protect your data: encryption of communications (HTTPS), submission of forms from our own server, storage of requests outside the public area of the website, and password-protected access restricted to reception staff, with automatic lockout after failed login attempts.
7. Cookies
Cookies are small files that a website stores in your browser. We use our own technical cookies, which the website needs in order to work, and, only if you accept them in the notice shown on your first visit, Google Analytics analytics cookies. Rejecting is as easy as accepting and the website works the same either way. Your choice is kept for 12 months, after which we will ask you again.
| Cookie | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| simur_consent | Simur Spaces (own) | Stores whether you accept or reject analytics cookies | 12 months | Technical |
| simur_lang | Simur Spaces (own) | Remembers the language you choose (Spanish or English) | 12 months | Technical / preferences |
| .AspNetCore.Antiforgery.* | Simur Spaces (own) | Protects the form against fraudulent submissions | Session | Technical |
| simur_admin, simur_disp | Simur Spaces (own) | Access to the private reception area (staff only) | 8 hours / 30 days | Technical |
| _ga | Google (third party) | Distinguishes visitors anonymously for statistics | 2 years | Analytics (with consent) |
| _ga_<ID> | Google (third party) | Keeps the Google Analytics session state | 2 years | Analytics (with consent) |
How to change your choice: click “Cookie settings” at the bottom of any page. If you withdraw consent, we delete the Google Analytics cookies from your browser and stop measuring your visits. You can also delete cookies in your browser settings. More information on how Google processes this data is available on its page for partner sites.
Other resources: fonts, icons, stylesheets, images, the floor plan and the location map are served from our own server. External links (Get directions on Google Maps, Google reviews, Instagram, LinkedIn, TikTok and WhatsApp) are ordinary links: data is only sent to those services if you choose to open them, in which case their privacy policies apply.