Privacy Policy

Last updated: 2026-08-27

1. Introduction

Stima Spain ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy describes how we collect, use and protect information obtained through http://stimaspain.com.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable national legislation.

2. Data controller

The controller responsible for the processing is:

3. What personal data we collect

We may collect and process the following personal data:

Contact form

When you contact us through our contact form, we collect:

  • Name
  • Email address
  • Phone number (optional)
  • Message

Technical data

When you visit the website, the following technical data may be collected automatically:

  • IP address (anonymised if Analytics is used)
  • Browser type and version
  • Operating system
  • Pages visited and timestamps
  • Referring URL

Cookies

We use cookies on our website. For full information about which cookies we use, see our cookie policy.

4. How we use your data

We process your personal data for the following purposes:

Purpose Legal basis
Responding to contact requests Legitimate interest (Art. 6(1)(f) GDPR)
Website functionality Legitimate interest (Art. 6(1)(f) GDPR)
Web analytics (if consent is given) Consent (Art. 6(1)(a) GDPR)
Marketing (if consent is given) Consent (Art. 6(1)(a) GDPR)

5. How long we keep your data

We only keep personal data for as long as necessary to fulfil the purpose:

  • Contact requests: Kept for up to 12 months after the matter has been concluded
  • Technical data: Logs are kept for up to 90 days
  • Cookie consent: Kept for 365 days

6. Third parties and data sharing

We do not share your personal data with third parties, except for:

  • Web hosting: To operate the website
  • Google Analytics: If you consent to analytics cookies (data is anonymised)
  • Email service: To deliver messages from the contact form

We do not transfer personal data outside the EU/EEA without appropriate safeguards.

7. Your rights

Under the GDPR you have the following rights:

  • Right of access: You can request a copy of your personal data
  • Right to rectification: You can request that inaccurate data be corrected
  • Right to erasure: You can request that your data be deleted ("the right to be forgotten")
  • Right to restriction: You can request that processing be restricted
  • Right to data portability: You can request that your data be transferred to another party
  • Right to object: You can object to processing based on legitimate interest
  • Right to withdraw consent: You can withdraw a given consent at any time

To exercise your rights, contact us at stina@stimaspain.com.

8. Security

We take appropriate technical and organisational measures to protect your personal data, including:

  • SSL/TLS encryption of data traffic
  • CSRF protection on all forms
  • Encrypted passwords (bcrypt)
  • Restricted access to personal data
  • Regular security reviews

9. Complaints

If you believe that we are processing your personal data in breach of the GDPR, you have the right to lodge a complaint with the supervisory authority in your EU/EEA member state. In Spain this is:

Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6, 28001 Madrid, Spain
www.aepd.es

10. Changes to this policy

We may update this privacy policy from time to time. In the event of significant changes, we will inform you via the website. We recommend that you review this page regularly.

Contact

Do you have questions about how we handle your personal data? Contact us:

Sidan drivs och hanteras av