Who processes the data
The controller is TOSEOS, S.L., tax ID B42927830. Correspondence address: Paseo Quince de Mayo, 18, 28019 Madrid, Spain. Privacy contact: legal@toseos.com.
This policy covers enquiries, quote requests and the website’s client area.
What information is used
The form collects your organisation, contact name, email, customer type, categories and a description of your needs. Without an account, a tax ID or phone number is required; with an account, both are required. It also records the reference, date, language, privacy acknowledgement and identifiers to prevent duplicates.
The client area processes the access, contact, company, tax identification and address details you provide, along with the billing information and authorised users you save. No card details are collected and no payments are processed.
Technical session and security data protect access and prevent abuse. Do not include identity documents, bank details, health or disability information. The site is intended for people acting in a professional capacity.
The form temporarily keeps your entries in this tab so you can recover them after reloading or changing language. See the cookie policy for details. The draft is not sent until you press the submit button.
Purposes and legal basis
We use the data to answer enquiries, prepare proposals and manage the client area. The basis is requested pre-contractual measures or the contractual relationship (GDPR Article 6(1)(b)); for contacts representing an organisation, legitimate interests in the professional relationship within Article 19 of Spain’s LOPDGDD.
Security relies on legitimate interests in protecting the service (GDPR Article 6(1)(f)). We handle data protection rights and legal obligations under Article 6(1)(c).
The checkbox acknowledges this information; it does not authorise advertising. There is no commercial profiling or automated decision-making with legal effects. You may object to processing based on legitimate interests under the GDPR.
Retention
Enquiries are kept while being handled and, where relevant, for the periods needed to meet obligations or address liabilities. Enquiries that do not lead to further business must be reviewed and deleted when no longer needed. Account data is retained during the relationship and for applicable statutory periods.
Form rate-limit controls expire after fifteen minutes.
Deleting a website record does not automatically delete emails or backups, which follow their own retention cycles.
Acknowledgement rate-limit controls expire after one hour.
Email, hosting and recipients
Requests are stored in WordPress and are accessible to authorised staff. A notice is sent to presupuestos_web@toseos.com with the reference and a link to the protected record. That address sends the applicant a brief acknowledgement with the request reference. The acknowledgement does not create an order or a payment.
Account activation, access recovery, client-area invitations and account management communications are sent from clientes@toseos.com. These are service messages without advertising.
IONOS provides the hosting and email services used by the site. Its service entities and subprocessors operate under the terms and agreements of the contracted service. You can request information about recipients, locations and safeguards for any international transfers at legal@toseos.com.
Data is shared only where needed to provide the service or meet a legal obligation, never for advertising. Tax and address checks are explained at the end of this page.
Your rights
You may request access to your data, its rectification or erasure, restriction of processing and the right to object. Portability and withdrawal of consent apply in the circumstances where those rights are applicable. Withdrawing consent does not affect the lawfulness of processing before its withdrawal.
For privacy enquiries and to exercise your rights: legal@toseos.com.
Business correspondence address: TOSEOS, S.L., Paseo Quince de Mayo, 18, 28019 Madrid, España.
State which right you wish to exercise and provide enough information to locate your data, such as the request reference. Additional information to verify your identity will only be requested where there is reasonable doubt; do not send unnecessary personal documents.
Exercising your rights is free of charge, subject to the exceptions provided by law. A response will be provided without undue delay and, as a general rule, within one month of receipt. If the complexity or number of requests requires an extension, this may be extended by up to two additional months; you will be informed within the first month and given the reasons.
If you consider that your rights have not been addressed, you may lodge a complaint with theSpanish Data Protection Agency (AEPD).
Changes to this information
This information will be updated when services or data processing change. Direct purchases and payments will require specific information before activation. The update date appears above.