Privacy Policy

This Privacy Policy explains how Ost Repair Tool Box ("we", "us", "our"), located at Bo. Bellavista, 45, 39012 Santander, Cantabria, Spain, collects, uses, and protects information you provide when using our website at ostrepairtoolbox.com or when engaging our services.

We operate in compliance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and the Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).

1. Data Controller

The data controller responsible for your personal data is:
Ost Repair Tool Box
Bo. Bellavista, 45, 39012 Santander, Cantabria, Spain
Email: [email protected]
Tel: +34 631 828 542

2. What Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, telephone number, postal address.
• Enquiry content: the details you provide in messages or contact forms, including descriptions of your property and the work required.
• Technical data: IP address, browser type, device type, pages visited, and time spent on the site. This data is collected automatically through cookies and server logs.
• Communications: records of emails, calls, or messages exchanged with us in connection with your enquiry or project.

We do not collect sensitive personal data (as defined in Article 9 of the GDPR) unless specifically required for the delivery of a service and with your explicit consent.

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to enquiries and provide quotations (legal basis: legitimate interests / pre-contractual steps).
• To manage and deliver contracted services (legal basis: performance of a contract).
• To comply with legal obligations, including tax records and consumer law requirements (legal basis: legal obligation).
• To improve our website and understand how visitors use it, using anonymised analytics data (legal basis: legitimate interests / consent for cookies).
• To contact you about your project or follow up after completion (legal basis: legitimate interests).

We do not use your personal data for automated decision-making or profiling.

4. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share data with:

• Sub-contractors engaged to fulfil specific elements of a project — only to the extent necessary and under confidentiality obligations.
• Professional advisers (accountants, lawyers) where required.
• Regulatory or law enforcement authorities where required by law.
• IT service providers who host our website or manage our email services, under appropriate data processing agreements.

Any third parties with whom we share data are required to handle it in accordance with applicable data protection law.

5. Data Retention

We retain personal data for as long as is necessary for the purpose for which it was collected:

• Enquiries that do not result in a contract: up to 12 months.
• Client and project records: 6 years from project completion, in compliance with Spanish commercial and tax law.
• Website analytics data: up to 26 months, in anonymised form.

6. Your Rights

Under the GDPR and LOPDGDD, you have the following rights regarding your personal data:

• Access: to obtain confirmation of whether we process your data and to receive a copy.
• Rectification: to request correction of inaccurate or incomplete data.
• Erasure: to request deletion of your data where there is no compelling reason for continued processing.
• Restriction: to request that we restrict processing of your data in certain circumstances.
• Portability: to receive your data in a structured, machine-readable format.
• Objection: to object to processing based on legitimate interests.
• Withdrawal of consent: where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), at www.aepd.es.

7. Cookies

We use cookies on our website. Please see our separate Cookie Policy for full details of the cookies we use and how to manage your preferences.

8. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS), access controls, and regular review of our security practices. No method of internet transmission is completely secure, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify users by updating the date at the top of this page. We encourage you to review this policy periodically.

10. Contact Us

For any questions about this Privacy Policy or our data practices, please contact us at:
Email: [email protected]
Post: Bo. Bellavista, 45, 39012 Santander, Cantabria, Spain