Personal data

Privacy.

How we handle the information you provide when contacting us.

Information

Controller

Erik Manuel Saldaña Diaz (LAKBAST), Spanish tax ID 46479882X, with an address at Carrer del Garraf 37, 1-3, 08905, L\'Hospitalet de Llobregat, Barcelona, España. Contact: lakbast@lakbast.com.

Data we process and why

We only process the data you send when emailing lakbast@lakbast.com or using the contact form: your name, email address and message (and, in the form, the type of project and your current website address if you provide it). When you use the form, abuse prevention checks analyse your IP address and technical browser data. We use this information to answer your enquiry and, if requested, prepare a proposal. We do not use it for advertising, create profiles or make automated decisions.

This website does not store enquiries in a database or use advertising. To understand and improve its use, we collect aggregate, cookie-free usage statistics, explained below.

Usage statistics

We use Umami, an open-source analytics tool installed on our own server in Spain, to count visits in aggregate: page views, referring page, device type, browser, operating system, language and approximate country. It uses no cookies, stores nothing on your device, does not track you across other sites and does not allow us to identify you. Your IP address is used only during the visit to estimate the country and generate an anonymous identifier that changes periodically; it is not stored. If your browser has “Do Not Track” enabled, your visit is not recorded.

The legal basis is our legitimate interest in understanding aggregate website use so we can improve it (Article 6(1)(f) GDPR). These data are not shared with third parties and are retained for no more than 24 months. After that, we keep only anonymous monthly totals, such as visits per page or country, which cannot identify anyone.

Legal basis

When you request information or a quote, we process your data to take pre-contractual steps at your request (Article 6(1)(b) GDPR). For other enquiries, our basis is legitimate interest in responding to messages we receive (Article 6(1)(f) GDPR). Processing technical connection data to serve and protect the website is based on our legitimate interest in its security and operation (Article 6(1)(f) GDPR). The form abuse prevention check is based on our legitimate interest in protecting the service from automated submissions. Required fields are necessary for us to respond.

Recipients and providers

We do not disclose your data to third parties except where legally required. These processors help provide the service:

  • Cloudflare, Inc.: the distribution and protection network through which all website traffic passes. It processes your IP address and technical connection data (browser, date and time, requested page) to deliver pages and protect against attacks and abuse. It also provides Turnstile to verify that a person submits the form.
  • Zoho Corporation B.V.: hosts the lakbast@lakbast.com mailbox in European Union data centres.
  • Resend (Plus Five Five, Inc.): delivers form messages to our mailbox.

The website is hosted on a privately managed server operated by the owner in Spain and reached through Cloudflare. Cloudflare and Resend are US companies and may process data outside the European Economic Area. These transfers rely on the EU–US Data Privacy Framework where the provider participates or, otherwise, on European Commission approved standard contractual clauses included in their data processing agreements.

Retention

If an enquiry does not lead to a commission, we keep messages for no more than one year after the last communication and then delete them. If you contract a service, we keep the data for the duration of the relationship and then for applicable statutory limitation periods, including those required by tax and commercial law.

Your rights

You can request access, rectification, erasure, objection, restriction of processing or data portability by emailing lakbast@lakbast.com. If you believe we have not handled your request correctly, you can complain to the Spanish Data Protection Agency (aepd.es).

Last updated: 19 de octubre de 2026.