PRIVACY POLICY

Last updated: October 2026

1. Data controller

Paprika Concept S.L.
CIF: B23981293
Glorieta de Quevedo 9, planta 5, Madrid (Spain)
Email: hola@paprikaconcept.com

2. Data we process

Through the contact forms we process the data you choose to send us: name, surname, email, WhatsApp number, company or project, and the content of your message. We do not ask for sensitive data. Please do not include it in your message.

3. Why we process it

• To answer your enquiry and, if you ask us, to prepare a proposal for your project.
• If you write to us as a supplier or partner, to assess a possible collaboration and to contact you about it.

We do not use your data to send newsletters or advertising, and we do not make automated decisions or profiles.

4. Legal basis

Your consent, given when you send the form, and, when you ask for a service or proposal, the steps prior to a contract that you request. You can withdraw your consent at any time, without affecting what was done before.

5. Who can access it

We do not sell or share your data with third parties, except where the law requires it. Service providers that we need for this website and for email (hosting, email and, when activated, the form delivery service) can access the data on our behalf, under confidentiality and data processing agreements.

The contact forms (clients, suppliers and partners) are managed with Tally (Tally BV, Belgium), which stores the answers on servers in the European Union and acts as our data processor.

6. International transfers

PáPRIKA works between Spain and Indonesia. Our team in Lombok may access your data to answer you, and some of our providers may store it outside the European Economic Area. In those cases we apply the safeguards required by the GDPR, such as the European Commission's standard contractual clauses.

7. How long we keep it

While we handle your enquiry or the resulting relationship, and afterwards only for the periods required to meet legal obligations. If no collaboration follows, we delete it within twelve months.

8. Your rights

You can access, rectify or erase your data, object to or restrict its processing, request its portability and withdraw your consent by writing to hola@paprikaconcept.com. If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es). If you are in Indonesia, you also have the rights set out in Law No. 27 of 2022 on Personal Data Protection.

9. Security

This website runs over HTTPS, does not store form data on its own server and only loads the external services described in the cookies policy.

10. Changes

We may update this policy to reflect legal or operational changes. The date at the top shows the latest version.