Privacy Policy

Last updated: July 2026

1. Data Controller

Identity: Oscar Palomar Coll
Email:
Website: https://oscarpalomar.com

2. Data We Collect

Through the contact form on this website, we collect the following personal data:

  • Name
  • Email address
  • Subject and message content

3. Purpose of Processing

The collected data is used exclusively to:

  • Respond to your inquiry or quote request
  • Maintain communication related to the requested service

4. Legal Basis

The processing of your data is based on the explicit consent you provide by checking the privacy policy acceptance box before submitting the form (Art. 6.1.a GDPR).

5. Data Retention Period

Data will be kept for the time necessary to address your inquiry and, where applicable, for the legally established periods. You can request its deletion at any time.

6. Recipients

Form data is processed through Web3Forms, a third-party form management service. If you have accepted measurement cookies, your email address is also shared with Google in pseudonymized form (see section 10). Data is not shared with other third parties unless legally required.

7. Your Rights

You have the right to:

  • Access: Know what personal data we hold about you.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request the deletion of your data.
  • Portability: Receive your data in a structured format.
  • Objection: Object to the processing of your data.
  • Restriction: Request limitation of processing.

To exercise these rights, contact us at the email address above.

8. Right to Complain

If you believe the processing of your data is not appropriate, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es

9. Security

Appropriate technical and organizational measures are applied to protect your personal data against unauthorized access, loss, or destruction.

10. Cookies and Advertising Measurement (Google Ads)

This website uses Google Ads (Google Ireland Ltd.) solely to measure conversions: knowing whether someone who contacts us arrived through an ad. We do not use first-party tracking cookies or third-party personalization cookies; the first-party storage we do use is detailed below.

  • Prior consent: by default no advertising cookie is set. They are only activated if you click "Accept" in the cookie notice (Google Consent Mode v2). If you reject them, the site works exactly the same.
  • Cookies used: Google Ads conversion cookies (e.g. _gcl_aw), with a maximum lifetime of 90 days, whose purpose is to attribute a contact to the ad that originated it.
  • First-party storage: if you accept cookies, your browser's session storage keeps the Google click identifier (oc_gclid) so we know which ad originated your message. It is deleted when you close the tab and is never shared with third parties. If you decline, nothing is stored. The banner itself also uses cookie-consent in local storage to remember your choice (essential in order to honour it).
  • Enhanced conversions: if you submit the contact form having accepted cookies, your email address is sent to Google hashed (irreversibly pseudonymized, SHA-256) for the sole purpose of improving conversion measurement. Google never receives your email in plain text.
  • Withdrawing consent: you can change your choice at any time via the "Cookies" link in the footer.

More information in Google's privacy policy and how Google uses cookies.

← Go back home