Data protection
Privacy Policy
What data we collect when you request a quote, what we use it for, how long we keep it, who else sees it and how you can exercise your rights at any time.
Data controller
Who processes your data
This policy explains how we process the personal data of people who contact us or browse this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
- Data controller: ASNUTEC S.L.U.
- Tax ID (NIF): B90064916
- Registered address: Barriada San Diego 35, 6º A · 41015 Sevilla
- Email: info@alquilersonidosevilla.com
- Telephone: 622 290 586
- Website: https://alquilersonidosevilla.com
We have not appointed a Data Protection Officer because our activity does not fall within the cases in which the law requires one. For any matter relating to your data, you can write directly to info@alquilersonidosevilla.com.
Details
What data we collect and through which channel
We only ask for the data needed to reply to you and prepare a quote. We do not collect special categories of data (health, political opinions, religion, etc.) and we ask you not to include them in your messages.
Website quote request form
- First name and surname.
- Telephone number.
- Email address.
- Date of the event.
- Town and venue where the event takes place.
- Approximate number of guests.
- The content of the message you send us.
- Your acceptance of this policy and the date and time at which it occurs, as proof of consent.
Fields marked as mandatory are essential: without them we cannot reply to you. The rest help us fine-tune the quote, but you may leave them blank.
If you write to us at info@alquilersonidosevilla.com, we process your email address, your name and everything you include in the message and in any attachments.
WhatsApp and messaging
If you message us on WhatsApp, we process your telephone number, the profile name displayed by the app itself and the content of the conversation. The messaging service is provided by a third party under its own terms and its own privacy policy, which are independent of us.
Telephone calls
If you call us, we process your number and the event details you give us verbally. We do not record calls.
What happens to your request once it is sent
The content of the form is sent by email to the owner's mailbox and is also stored as backup copy in a log file stored on our own server of the site (solicitudes.log), so that no request is lost if email delivery fails. That record contains the same data you sent us, the page from which the form was sent, the date and time, and the IP address from which it was submitted.
Anti-spam measures on the form
To prevent automated submissions, the form applies several measures, all of them our own and run on our server: hidden honeypot fields that a person never sees or fills in; a signed token, requested by the browser when the page loads and which expires, used to check that the submission comes from a genuine page of this website and not from a program; a rate limit per IP address; and an automatic review of the content of the message (links, alphabet used, consistency of the telephone number and date, and technical connection data such as the declared browser, the language and the referring page).
When that check considers a submission to be automated, the message is not delivered and is stored in a separate log (spam.log), for a limited time, so that we can check that no legitimate request has been discarded by mistake. That record contains the same data as the submission, the IP address and the reason for discarding it. The legal basis for these measures is the legitimate interest in the security of the site and in preventing fraud and abuse.
We do not use reCAPTCHA or any other third-party anti-bot service: none of this leaves our server.
Browsing
This site is a static website and does not set any first-party or third-party cookies: it has no analytics, no advertising pixels and no consent banner. The hosting server does log the usual technical data of any connection (IP address, date and time, page requested and browser identification) in its own logs, for security and operational purposes.
The only external resource the website loads is the Google Fonts typefaces. They do not set cookies, but to download them your browser connects to Google's servers and sends them your IP address. We explain this in detail in section 08 and in the cookie policy.
Purposes
What we use your data for
- Handling your enquiry and replying to the request you make via the form, email, WhatsApp or telephone.
- Preparing and sending you the rental quote and, if you accept it, managing the booking, the set-up and the delivery of the service.
- Maintaining the contractual relationship: coordinating schedules, venue access, the technical requirements of the event and any incidents.
- Invoicing and bookkeeping, as well as complying with our tax and commercial obligations.
- Commercial and administrative management of clients and requests, including following up on a quote that has been sent and not answered.
- Keeping a backup copy of the requests received through the form in a log file on the server, so that they can be recovered if the email does not arrive.
- Preventing fraud and spam: discarding automated submissions by means of the hidden honeypot field and limiting the submission rate per IP address.
We do not carry out profiling or take automated decisions with legal effects on you. We do not send mass marketing newsletters or pass your data on to third parties for advertising purposes.
Legal basis
Legal basis for each processing activity
- Consent of the data subject (Art. 6(1)(a) GDPR): submission of the website form and of the enquiries you send us by email or messaging. You may withdraw it at any time, without affecting the lawfulness of processing carried out beforehand.
- Performance of a contract or taking steps prior to entering into a contract (Art. 6(1)(b) GDPR): preparing the quote at your request, reserving the date, providing the rental and set-up service, and managing the relationship for as long as it lasts.
- Compliance with a legal obligation (Art. 6(1)(c) GDPR): issuing and keeping invoices and the accounting, tax and commercial records required by the applicable legislation.
- Legitimate interest (Art. 6(1)(f) GDPR): ordinary commercial and administrative management and following up on quotes sent to those who requested them.
- Legitimate interest in fraud prevention (Art. 6(1)(f) GDPR, in conjunction with Recital 47): the hidden honeypot field, the rate limit per IP address and the logging of the IP address with each request, in order to prevent automated and fraudulent use of the form. It also covers the backup copy of requests on the server, which ensures that a legitimate request is not lost. You may object to this processing at any time by explaining your particular situation to us.
If you do not provide the mandatory data, we will not be able to handle your request or prepare a quote for you: there is no other consequence.
Retention
How long we keep your data
We do not keep data “just in case”. These are the criteria we apply:
- Enquiries that do not lead to a booking: kept while the request is being handled and, afterwards, for a reasonable period so that the conversation can be resumed if you write to us again. Once that period has elapsed, they are deleted.
- Client data: for as long as the relationship lasts and, once it has ended, for the limitation periods of any legal actions that may arise from the contract.
- Invoicing and accounting: for the statutory retention periods laid down in tax and commercial legislation, which require invoices and books to be kept for several years from the last entry or from the end of the financial year.
- Consents and proof thereof: for as long as the processing is based on them and for the period during which liability may be claimed.
- Server request log (
solicitudes.log), including the IP address associated with each submission: it is kept for a maximum of 12 months from the request and is purged periodically. It is a backup copy, not a permanent archive. - Log of submissions discarded by the anti-spam filter (
spam.log): it is kept for a maximum of 3 months and is purged periodically. Its sole purpose is to detect mistaken discards. - Cookies: not applicable, as this site does not set any.
While data must be kept due to a legal obligation, it is blocked: it is used only to respond to requests from public authorities, judges or courts.
Recipients
Who else may access your data
We do not sell or pass on your data to third parties for commercial purposes. However, in order to operate, we work with providers who may access it as data processors, under a contract signed in accordance with Article 28 GDPR. We list them by category:
- Web hosting provider: maintains the server on which the site resides and where form submissions are processed.
- Email provider: provides the mailbox service in which messages are received and archived.
- Tax and accounting advisers: handle invoicing and tax and accounting obligations.
We do not use web analytics tools (neither Google Analytics nor any other), nor third-party anti-bot services such as reCAPTCHA, nor newsletter platforms. The form's anti-spam filter runs entirely on our own server.
The only disclosure to a third party that occurs simply by browsing is that of your IP address to Google, when the typefaces used on the website are downloaded. There is nothing else, and it is explained in section 08.
In addition, your data may be disclosed to the tax authorities, law enforcement agencies, judges and courts where there is a legal obligation to do so, and to banks in order to manage the payments and collections arising from the service.
If an external collaborator (for example, a freelance technician) is involved in a specific event, they receive only the data essential for the set-up: venue, schedule and on-site contact person.
Outside the EEA
International data transfers
We endeavour to work with providers that store information within the European Economic Area. The data you send us via the form, by email or by telephone is processed on servers and in mailboxes located in the European Union.
The only transfer that may take place outside the EEA is the one resulting from loading the Google Fonts typefaces: when requesting the typeface, your browser connects to Google's servers and sends them your IP address and technical browser data. We cannot prevent this while the typeface is served from Google, which is why we expressly declare it here.
Where this occurs, the transfer will be carried out under one of the safeguards provided for in Chapter V of the GDPR: an adequacy decision of the European Commission, the standard contractual clauses approved by the Commission or another valid mechanism, together with any supplementary measures that may be necessary.
This connection can be removed entirely by hosting the typefaces on our own server, and the technical delivery of this website includes a script ready to do so. Once this is applied, this section will be updated to state that the site makes no connection to third parties.
If you would like to know which specific safeguard covers a particular provider at any given time, write to us at info@alquilersonidosevilla.com and we will tell you.
Google Fonts
The typefaces are loaded from Google Fonts
This site does not use reCAPTCHA, Google Analytics, Tag Manager or social media pixels. We state this expressly because these services are often described in the privacy policies of websites that do not actually use them, and they are not used here.
What does happen is that the pages request their fonts from Google Fonts: the domains fonts.googleapis.com (the stylesheet) and fonts.gstatic.com (the font files). That request does not set cookies, but it does mean that your browser connects to Google servers and sends them your IP address, the page making the request and technical data about your browser and operating system. Google processes that information as controller, under its own terms.
Google's privacy policy and the Google Terms of Service apply.
If you prefer to avoid this connection, you can block external fonts in your browser or with an extension: the website will keep working and only the typeface will change. For our part, the typefaces can be hosted on our own server (the technical delivery of this website includes a script that does this) and, as soon as this is applied, no connection with Google will take place.
If you have any questions about this, you can write to us at info@alquilersonidosevilla.com or call us on 622 290 586.
Your rights
Rights you can exercise
Data protection legislation grants you the following rights:
- Access: to know which of your data we process and for what purpose.
- Rectification: to correct inaccurate data or complete incomplete data.
- Erasure: to ask us to delete your data when it is no longer necessary or when you withdraw your consent, unless we are required to keep it by law.
- Objection: to object to processing based on our legitimate interest.
- Restriction of processing: to ask us only to store the data while a complaint is being resolved or its accuracy is being verified.
- Portability: to receive the data you have provided to us in a structured, commonly used format, or to have us send it to another controller.
- Withdrawal of consent at any time, without retroactive effect on processing already carried out.
How to exercise them
Write to info@alquilersonidosevilla.com or to our postal address, Barriada San Diego 35, 6º A · 41015 Sevilla (Spain), stating the right you wish to exercise and enclosing a copy of your DNI (Spanish national ID card) or equivalent document so that we can verify your identity. It is free of charge and we will reply within a maximum of one month, which may be extended under the terms laid down in the GDPR if the request is complex.
Complaints to the supervisory authority
If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid. We would be grateful if you wrote to us first: almost everything can be resolved with an email.
Safety
Security measures
We apply appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access and alteration, taking into account the state of the art, the nature of the data and the risks of the processing.
- Encrypted connection by means of a certificate across the entire website.
- Access to information restricted to the people who need it for their work, with individual credentials.
- Data processing agreements with the providers that access data.
- Backups and updates of the site's systems and software.
- The request log file is stored out of public reach, with restricted permissions, and is purged periodically.
No system is infallible. Should a security breach occur that may pose a high risk to your rights, we will inform you and notify the supervisory authority within the time limits set by the GDPR.
Minors
Minors
This site is aimed at adults with the legal capacity to contract equipment rental services. We do not knowingly collect data from children under the age of 14.
If we discover that a minor's data has been provided without the consent of the person holding parental authority or guardianship, we will delete it. If you are a parent or guardian and believe this has happened, write to us at info@alquilersonidosevilla.com and we will resolve it immediately.
Other pages
Validity
Updates to this policy
This policy may be amended to reflect changes in legislation, guidance from the Spanish Data Protection Agency (AEPD) or changes in the services and providers we use. Changes are published on this same page and, if they substantially affect processing based on your consent, we will inform you and ask for your consent again.
We recommend that you review it whenever you send us data again. The date shown below indicates the version currently in force.
Last updated: 26 August 2026
