Privacy policy
Updated: 24 October 2026
Controller
Andrii Sobol is the controller of personal data handled by REPUERTAS. Identification and contact details are provided below.
Andrii Sobol, sole traderREPUERTAS · NIF: Y9553681R
Pl. Goya 5, piso 8, puerta 1, 08290 Cerdanyola del Vallès, Barcelona, España
info@repuertas.es · +34 936 94 24 18
Data, purposes and legal basis
We use your name, telephone number, town or address, language, requested service and information you provide by form, telephone, email or WhatsApp. This lets us respond, prepare quotes, arrange visits and deliver services. The legal basis is taking steps at your request before a contract and performing a contract (GDPR Article 6(1)(b)). Required form fields are needed to handle the request; without them we cannot respond properly. Do not send sensitive information or unnecessary details about other people.
Virtual telephone assistant
Calls may be answered by an AI assistant using Zadarma and Retell. Your voice is processed to understand your request. The current configuration does not persistently retain new audio recordings or full transcripts; temporary copies may be needed to process the call. A Russian-language summary is generated with the contact number and caller’s language. Older records remain subject to their previous deletion schedules. The assistant does not set final prices or decide whether to accept a job: a specialist confirms the details. You can ask for a person to contact you or email us directly.
Reports by email and Telegram
The call summary is sent to info@repuertas.es and the private REPUERTAS team group on Telegram. It includes the telephone number, language, needs summary and, if provided, name and address, limited to what is needed to help you. Internal notifications rely on our legitimate interest in arranging a prompt response (GDPR Article 6(1)(f)), not marketing or data sales. Access is restricted to authorised staff. Telegram groups are cloud services, not end-to-end encrypted secret chats. If you prefer another channel, tell info@repuertas.es; you may object to processing based on legitimate interests. Website forms are delivered by email, not through this call integration.
Providers and recipients
Providers include Arsys (hosting), DonDominio (domain and email), Zadarma (telephony), Retell AI (voice assistant) and Telegram (internal call alerts). If you choose WhatsApp, its provider is involved; allowing the map involves OpenStreetMap. Only data needed for each service is shared. We may also share information with professionals handling your request and authorities where legally required. We do not sell personal data or send marketing campaigns.
International processing
We do not promise that all services operate solely within the European Economic Area. Retell and its subprocessors may process data outside the EEA; its processing agreement provides standard contractual clauses for transfers it covers. Telegram and WhatsApp have their own services and international transfers, described in their policies. Retell’s agreement does not cover these other providers. You can request information about applicable safeguards at info@repuertas.es.
Retention
Requests that do not become jobs are deleted or anonymised 90 days after the last contact, unless work is still ongoing or legal retention is required. This operational period also requires review of email and working channels. For accepted jobs, documents are retained during the relationship, warranty periods and applicable liability and accounting periods. Automatic mailbox cleanup only covers identified notifications and excludes starred messages; it does not replace that review. New Telegram group messages auto-delete after three calendar months; older messages are not affected retroactively. Technical delivery markers are purged after 90 days. New application logs exclude request bodies and client IP addresses; providers may retain their own technical records under their obligations.
Analytics and session replay
With separate consent, we use Google Analytics 4 to count visits and actions, and Microsoft Clarity to analyse clicks, scrolling and session replay. Request form fields are not sent as event data; content is masked before Clarity captures it. Google Signals, advertising personalisation and automatic form measurement are disabled. Microsoft is an independent controller and may also use data for its own products and advertising under its policy, not only on REPUERTAS instructions. These services may involve international processing. Legal basis: consent (GDPR Article 6(1)(a)), withdrawable in the footer. The form works if measurement is rejected. Google Ads and Meta Pixel remain disconnected. Google information: https://policies.google.com/technologies/partner-sites. Microsoft information: https://privacy.microsoft.com/privacystatement.
Analytics retention
Cookie lifetimes differ from report retention. Clarity keeps ordinary replay data for 30 days and heatmap, click and labelled or favourite session data for up to 9 months. Google Analytics event and user data retention is set to 2 months, without resetting the period on new visits. This setting does not delete standard aggregated reports. The 90-day period for service requests does not apply to this analytics data. Details: https://learn.microsoft.com/en-us/clarity/setup-and-installation/data-retention and https://support.google.com/analytics/answer/7667196.
Your rights
Where applicable, you may request access, correction, erasure, restriction, portability and object to processing. You can withdraw consent without affecting earlier lawful processing. Write to info@repuertas.es or the controller’s postal address, explaining your request and how to reply. Additional identification is requested only when needed. We normally respond within one month; any lawful extension will be explained. You may complain to the Spanish Data Protection Agency: https://www.aepd.es/. We do not make solely automated decisions with legal or similarly significant effects.