Privacy Policy

Privacy Policy
Last updated: March 03, 2026

This Privacy Policy explains how personal data is collected and processed when you use https://heavyandgreen.com (the “Website”).

1. Data Controller

For the purposes of the GDPR (EU) 2016/679, the Data Controller is:
Berenice Casandra Rojas Pavez
Email: contact@heavyandgreen.com
Country of establishment: Spain

2. Personal Data We Collect

2.1. Data you provide through the contact form or email

We may collect the following data when you contact us or request information/services:

  • Name and surname
  • Email address
  • Phone number (if you provide it)
  • Professional information (company, role, project details)
  • Message content and any information you choose to share

2.2. Usage Data

We may collect Usage Data automatically (e.g., IP address, browser type, pages visited, time spent) for website security and analytics.

3. Purposes and Legal Basis (GDPR)

We process personal data for the following purposes:

  • Responding to inquiries and managing leads (consent and/or pre-contractual measures)
  • Providing services and managing client relationships (performance of a contract)
  • Website security and analytics (legitimate interests)
  • Compliance with legal obligations (legal obligations)

4. Service Providers (Data Processors)

We may use trusted providers strictly necessary to operate the Website and manage communications, such as:

  • Hosting provider (e.g., HostGator)
  • Google services (e.g., Google Analytics / Google Workspace, where applicable)
  • Notion (if used for internal organization / CRM purposes)

If we enable a newsletter in the future, we will use email marketing providers that comply with GDPR requirements. You will always be able to unsubscribe.

5. Data Retention

We keep personal data only as long as necessary:

  • Contact form inquiries/leads: while communications are ongoing, and thereafter for a reasonable period or until you request deletion.
  • Client data: for the duration of the contractual relationship and as required by legal/accounting obligations.

6. International Transfers

Some providers may process data outside the EEA. Where applicable, we use appropriate safeguards under GDPR (e.g., Standard Contractual Clauses or adequacy decisions).

7. Your Rights (GDPR)

If you are in the EEA, you have the right to access, rectify, erase, restrict, object, and request portability of your data, and to lodge a complaint with the Spanish Data Protection Agency (AEPD).

8. Children’s Privacy

The Website is not intended for children under 14 years of age. We do not knowingly collect personal data from children under 14.

9. Contact

For privacy requests: contact@heavyandgreen.com