Privacy policy
This policy explains which data we collect when you write to us, ask for a quote or book a service, what we use it for, who we share it with and how you can exercise your rights. It complies with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection and the guarantee of digital rights (LOPDGDD).
Data controller
The controller is Manitas Costa [razón social pendiente], tax number (NIF) [pendiente], registered address [domicilio social pendiente], owner of the website manitascosta.es. For any question about your data you can email hola@manitascosta.es or use the contact page. Full identification details are in the legal notice.
Which data we process and where it comes from
We only process the data you give us when you contact us, book or pay, and the data generated by the service itself:
- Identity and contact details: name, phone number, email and, where relevant, preferred language.
- Service details: the property address, floor, photos and videos of the fault, measurements, visit times and, if you do not live there, the person or agency handing over the key.
- Billing and payment details: NIF or passport number if you want the invoice in your name, payment method and the bank transfer or Bizum reference. We never store card numbers.
- Messages and calls: the WhatsApp, email or form history relating to your request.
- Job applications: CV, experience, area, languages and photos of work you send us voluntarily.
- Browsing data: only what is described in the cookie policy.
What we use your data for and on what legal basis
| Purpose | Legal basis | Retention |
|---|---|---|
| Replying to your quote request or enquiry | Pre-contractual steps at your request (art. 6.1.b GDPR) | 12 months from the last contact if you do not book |
| Providing the service, coordinating the tradesman and managing the guarantee | Performance of a contract (art. 6.1.b GDPR) | Duration of the service and the 6-month guarantee, plus statutory limitation periods |
| Issuing invoices and meeting tax and accounting obligations | Legal obligation (art. 6.1.c GDPR) | The period required by tax and commercial law (generally 6 years) |
| Handling complaints and defending our rights | Legitimate interest (art. 6.1.f GDPR) | Until the limitation period for legal action expires |
| Asking you for a review after the service | Legitimate interest (art. 6.1.f GDPR); you may object | A single message after each job |
| Managing job applications | Pre-contractual steps and consent | 12 months from the application |
| Analytics cookies, if you accept them | Consent (art. 6.1.a GDPR) | See cookie policy |
Who we share your data with
The self-employed tradesman who does the work receives the details he needs to do it: your name, phone number, address, photos of the fault and the visit time. He acts as a data processor under a contract that obliges him to use the data only for that job and to delete it afterwards.
The following also process data on our behalf, as processors: the website's hosting and content delivery provider, the WhatsApp messaging service (Meta Platforms Ireland) when you write to us on that channel, the tool we use to manage jobs, and our accountants for invoicing. Some of these providers may process data outside the European Economic Area; where they do, it is under the European Commission's standard contractual clauses or an adequacy decision.
We do not sell or pass your data to third parties for commercial purposes. We will only disclose it to public authorities, courts or law enforcement where the law requires it.
Your rights
At any time and free of charge you can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw consent where that is the legal basis. Email hola@manitascosta.es stating which right you are exercising and attaching a document that proves your identity. We reply within one month.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Security, minors and changes
We apply reasonable technical and organisational measures to protect your data: password-protected access to our management tools, encryption in transit, and deletion of fault photos once they are no longer needed. The service is aimed at people over 18; if we detect data about a minor without their guardians' authorisation, we delete it.
This policy may be updated when the law or our services change. The current version is always the one published on this page, with the revision date at the bottom. Use of the site is also governed by the legal notice and the cookie policy; you can return to the home page from here.
Frequently asked questions
What do you do with the photos I send of my home?
They are used only to price the job and so the tradesman knows which part to bring. They are seen by the person coordinating your job and the tradesman assigned to it. We do not publish them on the website or on social media without your express permission, and they are deleted when the guarantee on the job ends, or sooner if you ask.
Do you share my phone number with the handyman who comes?
Yes, because he needs to let you know when he is on his way and to find the property. He is contractually obliged to use it only for that job and not to keep it afterwards. If you would rather all communication went through the company number, tell us when booking and we arrange it that way.
How do I ask you to delete my data?
Email hola@manitascosta.es from the email address or phone number you contacted us with, or attach a copy of your ID. We delete everything we are not legally required to keep: invoices must be kept for the tax retention period, but message history, photos and contact details are deleted within one month.
Do you record calls or keep WhatsApp messages?
We do not record calls. WhatsApp messages and emails relating to your job are kept for the duration of the service and the guarantee, because they are the record of the agreed price. They are then deleted, except for details that must appear on the invoice. You can ask for earlier deletion by emailing hola@manitascosta.es.