In case of any discrepancy, the Spanish version prevails.
This website has no contact or registration forms. If you write to us, you do so via WhatsApp or email, and we only process the data you send us through those channels.
1. Data controller
- Controller: Ismael Sojo Coronado (ONIN)
- Tax ID (NIF): 46288138V
- Address: C/ Provença 22, 2-2, 17300 Blanes (Girona)
- Contact: info@onin.es
2. What data we process and why
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| You write to us via WhatsApp or email | Name, phone number or email address and whatever you tell us | To answer your enquiry and, if you ask, prepare a proposal | Your consent and pre-contractual measures (Art. 6(1)(a) and 6(1)(b) GDPR) |
| You are a client | Contact and billing details, and any access credentials you provide | To provide the service, invoice and comply with legal obligations | Performance of the contract and legal obligation (Art. 6(1)(b) and 6(1)(c)) |
| You accept analytics or marketing cookies | Pseudonymised browsing data | To measure use of the website and the effectiveness of our campaigns | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| You use the free tools | None: they run in your browser and nothing is sent | — | — |
We do not make automated decisions or carry out profiling that produces legal effects concerning you.
3. How long we keep it
Enquiries that do not lead to an engagement are kept for as long as the conversation lasts and, at most, one year after the last contact. Client data is kept for as long as the relationship lasts and, afterwards, for the applicable statutory limitation and tax periods.
4. Who we share it with
We do not sell or disclose data to third parties, except where required by law. We work with providers that act as data processors:
- Hostinger: website hosting.
- Google (Workspace, Tag Manager and Analytics): email and, only if you accept, analytics.
- Meta (WhatsApp Business and, only if you accept, the Meta pixel): messaging and campaign measurement.
- Accountancy firm and banks, for client invoicing.
Some of these providers may process data outside the European Economic Area. In that case, they do so under the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission.
5. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent at any time, by writing to info@onin.es and stating which right you wish to exercise. If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD, aepd.es).
6. Security
We apply appropriate technical and organisational measures: encrypted connection (HTTPS), restricted access to client information, and providers that offer data protection guarantees.