Privacy Policy
Last updated: 15 June 2026
This Privacy Policy explains how Zector Digital Group S.L. ("we"), trading as Costa del Sol Fixers, processes your personal data when you visit this website, submit a request, contact us, or contract a service. It is drafted in accordance with Regulation (EU) 2016/679 (GDPR) and the Spanish Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD).
1. Data controller
- Controller: Zector Digital Group S.L. (CIF B21668744)
- Address: Av. Octavio Paz 12, 29190 Málaga, Málaga, Spain
- Privacy contact: hello@costadelsolfixers.es
We have not appointed a Data Protection Officer because we are not legally required to do so. The above address is the point of contact for any privacy-related question.
2. Categories of personal data we process
Depending on how you interact with us, we may process:
- Identification and contact data: name, email, telephone, WhatsApp number, preferred language.
- Property-related data: property address, type of property, owner/tenant status, access instructions you choose to share.
- Service request data: description of the work, photographs or files you upload, urgency, budget range.
- Communication data: messages exchanged by email, telephone, WhatsApp, web form or chat, and an automated log of your conversation with our website chatbot.
- Contractual and billing data: quotation, accepted scope, invoices, payments, service reports, version of the terms accepted.
- Technical data: IP address, browser, operating system, pages viewed, security logs, cookie and consent identifiers, UTM parameters.
Fields marked as mandatory are necessary to deal with your request. If you do not provide them we may be unable to respond or provide the service.
3. Purposes and lawful bases
| Purpose | Lawful basis (GDPR Art. 6) |
|---|---|
| Review your request and prepare a quotation | Pre-contractual measures at your request (Art. 6(1)(b)) |
| Provide the contracted service and related communications | Performance of a contract (Art. 6(1)(b)) |
| Invoicing, accounting and tax records | Legal obligation (Art. 6(1)(c)) |
| Website security, fraud prevention and log retention | Legitimate interests (Art. 6(1)(f)) |
| Non-essential cookies and analytics | Consent (Art. 6(1)(a)) |
| Optional service updates and marketing communications | Consent (Art. 6(1)(a)) — you may withdraw it at any time |
| Defence of legal claims | Legitimate interests (Art. 6(1)(f)) |
4. Recipients of your data
We do not sell your personal data. We may share it with:
- Subcontractors, autónomos and specialist companies who carry out the work you request, strictly to the extent necessary.
- Service providers acting as processors (hosting, email, database, payment, accounting), bound by written agreements.
- Public authorities and courts when we are legally required to do so.
- Professional advisors (accountants, lawyers) where necessary to defend legal claims or comply with the law.
5. International transfers
Some of our processors may store or process data outside the European Economic Area. Where this happens, transfers are made under adequacy decisions of the European Commission, Standard Contractual Clauses, or other safeguards permitted by Chapter V GDPR. A copy of the relevant safeguard can be requested at hello@costadelsolfixers.es.
6. Retention
We keep your data only as long as necessary for the purposes above:
- Requests that do not result in a contract: up to 12 months from last contact, then deleted or anonymised.
- Contractual records and service reports: for the period during which legal claims may arise (general statutes of limitation under Spanish civil and commercial law) and to comply with tax/accounting obligations (at least 6 years for accounting records).
- Uploaded files (photos, documents): deleted or anonymised once they are no longer required for the job and any related warranty period.
- Marketing consent records: until you withdraw consent, plus the period needed to evidence the withdrawal.
- Cookie consent records: as set out in our Cookie Policy.
Specific retention periods are subject to confirmation by Zector Digital Group S.L. in its internal retention schedule.
7. Your rights
You have the right to:
- access your data and obtain a copy;
- rectify inaccurate or incomplete data;
- erase your data where the GDPR permits;
- restrict or object to processing;
- portability of the data you provided to us;
- withdraw any consent at any time, without affecting prior lawful processing;
- not be subject to a decision based solely on automated processing producing legal or similarly significant effects (we do not currently take such decisions).
You can exercise these rights by writing to hello@costadelsolfixers.es, indicating the right you wish to exercise. We may need to verify your identity. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD, www.aepd.es).
8. Security
We apply reasonable technical and organisational measures to protect your data, including access controls, encryption in transit, secured storage for uploaded files, and confidentiality obligations on staff and subcontractors.
9. Minors
Our services are directed at adults. We do not knowingly collect personal data from children. If you believe a minor has provided us with data, please contact us so we can delete it.
10. Chatbot, WhatsApp and third-party messaging
If you contact us via WhatsApp or our website chatbot, the conversation is processed by us under this Policy and, in the case of WhatsApp, also by Meta Platforms Ireland Ltd. under its own terms and privacy policy. Our chatbot is an automated assistant; please avoid sharing unnecessary sensitive information.
11. Updates
We may update this Policy. The "Last updated" date above will reflect any change. Material changes will be highlighted on the website.