Privacy policy

Data controller

• Fonai Services S.L.
• Tax ID (NIF): 000000000
• Address: C/ Lanjarón 4, Granada, Spain
• Email: Show email address

What data we process and why

When you write to us through the contact form or by email we process your name, email address, company (if you provide it) and the content of your message. We use this information only to answer your enquiry and, if you wish, to discuss and prepare a possible project.

Legal basis

Processing is based on your request to be contacted and on taking steps prior to entering into a possible contract at your request (Article 6(1)(b) GDPR). We do not use your data for marketing or automated decision-making.

How long we keep it

We keep enquiries for as long as needed to handle them and no longer than twelve months after our last communication, unless a business relationship follows; in that case the data is kept for the periods required by law.

Recipients and service providers

We do not sell or share your data with third parties. We use these providers to run the website and email:

• Cloudflare, Inc. — website hosting, security and processing of form submissions.
• Google LLC — email service (Gmail) where messages are received.

These providers may process data outside the European Economic Area. Such transfers are covered by the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.

Customer service via WhatsApp and other messaging channels

If you write to a WhatsApp number (or another messaging channel) operated by us, we process your phone number, your profile name and the content of the messages and files you send, in order to answer your enquiry. Some replies may be generated automatically (for example, an acknowledgement or a transfer to a member of our team); you can always ask to speak to a person. We do not use these messages for advertising or for automated decisions with legal or similarly significant effects.

• Legal basis: your request to be attended to (Article 6(1)(b) GDPR) and our legitimate interest in providing customer service (Article 6(1)(f) GDPR).
• Providers: Meta Platforms Ireland Ltd. (WhatsApp Business Platform), which delivers the messages, and our own servers in the European Union, where conversations are stored and processed.
• Retention: conversations are kept for as long as needed to handle your enquiry and are deleted no later than twelve months after the last message, unless a business relationship follows. Technical logs of automated processes are deleted after 14 days.

You can stop the conversation at any time and exercise the rights described below, including asking us to delete your conversation history.

Cookies and analytics

This website does not use analytics, advertising or tracking cookies. If the form is protected by Cloudflare Turnstile, it only performs a technical check to prevent spam.

Your rights

You can request access to your data, its rectification or erasure, the restriction of or objection to its processing, and data portability by writing to Show email address or to the postal address above. If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).