Privacy policy

Who the controller is

Sole trader

Volodymyr Tarasov

NIF (Spanish tax ID)

Z4055528N

Address

Pont de la Cros 16, 4º 3ª, 08918 Badalona (Barcelona)

Email

[email protected]

Phone

930 45 09 00

What we collect and why

The form asks for four things only: your phone number, the type of renovation, your postcode and when you want to start. It does not ask for your name, your email or your exact address.

On the call we do collect more, because a job cannot be quoted without it: your name, the address of the property if you agree to a visit, what you want done, rough measurements, the condition it is in and when would suit you.

We also keep the outcome of each attempt to reach you (whether you answered, whether the number was wrong, whether the property is not yours, how long the call lasted), whether a visit was arranged and whether you attended, and — if you go on to contract with the builder — the date and value of the signed job. That is what tells us which adverts bring real customers, and what we invoice the builder on.

We record the time of submission, the page you sent it from and, if you arrived from an advert, the click identifier — Google’s (gclid) or Meta’s (fbclid) — and UTM parameters.

Separately, and without cookies or identifiers, we count in aggregate which steps of the form are abandoned and how many visitors fall outside our area. That count is not linked to your enquiry.

Do you have to give us this?

No. None of it is a legal or contractual requirement. But without a phone number we cannot call you, and without a postcode we cannot tell you whether your home falls inside the area we cover — so withholding them simply means we cannot provide the service.

On what legal basis

Your consent (Art. 6(1)(a) GDPR)

To call you and to pass your details to the construction company. You give it by ticking the box on the form and can withdraw it at any time.

Legitimate interest (Art. 6(1)(f) GDPR)

Keeping a record of your request and of the consent you gave, so we can evidence it and handle any complaint. We do not carry out or invoice the work: the construction company does, on its own legal basis.

Who we share it with

We disclose your details to Andranik Hasratyan, NIF X3308833F, who handles them as an independent controller in order to quote your job and, if you go ahead, carry it out. It does not act on our behalf: from the point of disclosure it is responsible for your data, and it gives you its own privacy policy at the visit.

This disclosure is the main reason we ask for explicit consent, and it is stated prominently on the form itself, following the criteria of the Spanish DPA’s Circular 1/2023 on lead-generation processing.

We also use suppliers acting as processors who may access the data for technical reasons:

• Vercel Inc. — website hosting.
• Telnyx LLC — telephone switchboard: routes calls to the published number, records them and transcribes them.
• Neon Inc. — database, hosted in Frankfurt, Germany.
• Google Ireland Ltd. — advertising measurement, only if you accept cookies.
• Meta Platforms Ireland Ltd. — advertising measurement on Facebook and Instagram, only if you accept cookies.
• Telegram FZ-LLC — internal alert that a request has come in. The alert carries none of your data: it says only that there is a new request.

International transfers

Vercel Inc. and Neon Inc. are established in the United States. In both cases the transfer relies on the Standard Contractual Clauses approved by the European Commission, supplemented by the EU-US Data Privacy Framework where applicable. The data itself does not leave the European Economic Area: the site is served from Paris and the database sits in Frankfurt.

Google Ireland Ltd. is established in the European Union; its onward transfers outside the EEA are governed by Google’s Standard Contractual Clauses.

Meta Platforms Ireland Ltd. is established in the European Union; its onward transfers outside the EEA rely on the EU-US Data Privacy Framework and on Standard Contractual Clauses.

Telegram FZ-LLC is established in the United Arab Emirates, a country with no adequacy decision. That is why the alert we send it contains no personal data at all.

You can ask us for a copy of the applicable safeguards by writing to [email protected].

Call recording

Telephone calls with Obra Justa are recorded, and the recording may be transcribed automatically. The purpose is to evidence what was agreed about the quote and the visit, and to settle disagreements.

You are told about the recording at the start of every call, before the phone rings. The legal basis is the controller’s legitimate interest (art. 6.1.f GDPR) in documenting the pre-contractual relationship. You may object at any time by saying so at the start, and the conversation will continue without being recorded.

Recordings and their transcripts are kept for 30 days and deleted automatically thereafter. The provider is Telnyx LLC (United States), acting as a processor under the Standard Contractual Clauses.

How long we keep it

Requests we never pass on

12 months from the last attempt to reach you. This covers those outside our area and those we never manage to speak to.

Requests passed to the builder

3 years from disclosure. That is how long we need to be able to evidence that you consented and to handle a complaint. Whatever the builder keeps independently is governed by his own policy.

Call outcomes, visits and signed jobs

The same period as the request they belong to. They are deleted with it.

Aggregate count of form usage

14 months. It is not linked to any request or to any person.

Your rights

You may ask us for access to your data, its rectification or erasure, restriction of or objection to processing, and portability. You may also withdraw consent at any time, without affecting the lawfulness of processing carried out before that.

Write to [email protected] saying which right you are exercising. We respond within one month at the latest.

If you think we have handled your request badly, you can complain to the Spanish Data Protection Agency (www.aepd.es), which is the competent supervisory authority.

What we do not do

We do not record calls. We do not make automated decisions about you or build profiles: who gets called, and in what order, is decided by a person. We have not appointed a data protection officer because the activity does not require one; write to the address above and the controller answers you directly.

Children

This service is aimed at adults with capacity to commission building work. We do not knowingly collect data from minors.