Privacy policy
1. Data controller
The controller of the personal data collected through this website is:
Controller: Fernando Arrizado Abuín
Tax ID / NIF: 33343831H
Address: Rúa das Noreas, 4, 27001 Lugo, Spain
Email: ola@ola.gal
Website: ola.gal
This policy explains how the personal data of people who visit this website, contact ola.gal or request information about the services offered are collected, used and protected.
2. Personal data that may be processed
The following categories of personal data may be processed through this website:
Data provided by the user: name, surname, company or organisation, email address, telephone number, message sent and any other information voluntarily included in the contact form or in an email.
Data arising from the professional relationship: data necessary to prepare proposals, respond to enquiries, provide services, manage communications, issue invoices or comply with legal obligations, where there is a professional or contractual relationship.
Technical and browsing data: IP address, cookie identifiers, browser information, device, operating system, pages visited, interaction with the website and statistical usage data, always according to the cookie settings accepted by the user.
Security and technical control data: information necessary to protect the website against spam, improper access, automated attacks or abusive use of forms.
3. Purposes of processing
Personal data may be processed for the following purposes:
To respond to enquiries and requests for information.
Data sent through the form or by email are used to respond to messages, answer questions, prepare proposals or maintain communications related to the services offered by ola.gal.
To manage professional or contractual relationships.
Where there is a professional relationship, data may be used to provide services, prepare quotations, monitor projects, manage payments, issue invoices and comply with administrative, tax or legal obligations.
To maintain website security.
Technical data may be processed in order to detect, prevent or block spam, fraudulent use, unauthorised access attempts or activities that may compromise the security of the website.
To analyse website use.
With the user’s consent, measurement tools such as Google Analytics, Google Site Kit or equivalent systems may be used to obtain aggregated information about how the website is used and to improve its operation, content and performance.
To manage cookie consent.
The website uses CookieYes to allow users to accept, reject or configure cookies and to store the choice made by the user.
To comply with legal obligations.
Certain data may be processed when necessary to comply with legal obligations, respond to requests from authorities or defend rights and legitimate interests.
4. Legal basis for processing
The legal basis for processing personal data depends on each purpose:
Response to enquiries or requests: implementation of pre-contractual measures requested by the data subject or legitimate interest in responding to communications received.
Provision of professional services: performance of a contractual or pre-contractual relationship.
Administrative, tax or accounting management: compliance with legal obligations.
Website security and prevention of abuse: legitimate interest in keeping the website secure and operational.
Use of analytics or non-essential cookies: user consent.
Management of cookie consent: compliance with legal obligations related to information and obtaining consent.
5. Data retention
Data will be kept for as long as necessary to fulfil the purpose for which they were collected.
Enquiries received through the form or by email may be kept for the time necessary to respond to the request and follow up on the communication. If no professional relationship is initiated, they may be deleted or archived within a reasonable period, unless there is a legal obligation or legitimate interest to keep them for longer.
Data linked to clients, invoicing or contracted services will be kept for the duration of the professional relationship and, subsequently, for the periods required by applicable tax, accounting, commercial or professional liability regulations.
Data associated with analytics cookies will be retained according to the periods indicated in the Cookie policy and in the configuration of each tool.
Data processed for security reasons may be retained for as long as necessary to detect, investigate or block fraudulent or harmful activities.
6. Recipients of the data
Personal data will not be sold or transferred to third parties for commercial purposes.
Data may be processed by providers necessary for the operation of the website and the provision of services, always under the corresponding safeguards. These may include:
Lucushost, as web hosting provider.
Zoho Mail, as email service provider.
Google, in the case of services such as Google Analytics or Google Site Kit, when they are active and the user gives consent for the corresponding cookies.
CookieYes, as a cookie consent management tool.
WP Armour, as an anti-spam and form protection tool.
This website may also offer a contact link or button through WhatsApp, using tools such as Social Chat. By using this option, the user accesses an external service provided by WhatsApp/Meta, which will process data in accordance with its own terms and privacy policies. ola.gal does not control the processing, cookies, settings or communications carried out directly by WhatsApp once the user accesses that service.
Data may also be communicated to public administrations, courts, tribunals or competent authorities where there is a legal obligation to do so.
7. International data transfers
Some technology providers may process data outside the European Economic Area or use infrastructure located in different countries.
Where this occurs, the aim will be to ensure that processing is carried out with appropriate safeguards in accordance with data protection regulations, such as adequacy decisions, standard contractual clauses or other legally recognised mechanisms.
In the case of tools such as Google Analytics, processing will depend on the configuration applied, the provider’s terms and the consent given by the user through the cookie settings panel.
If the user contacts through external services such as WhatsApp, the processing of data will be carried out in accordance with the terms and policies of that service.
8. Users’ rights
Any person has the right to:
Access their personal data.
Request the rectification of inaccurate data.
Request the deletion of their data when they are no longer necessary.
Request restriction of processing.
Object to processing in certain cases.
Request data portability, where applicable.
Withdraw consent given, especially in the case of cookies or processing based on consent.
To exercise these rights, a request may be sent to:
The request must clearly indicate which right is being exercised. Where necessary to verify the identity of the applicant, additional information or supporting documentation may be requested.
A complaint may also be lodged with the Spanish Data Protection Agency if the data subject considers that the processing of their data does not comply with the applicable regulations.
9. Data security
The website owner applies reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.
However, no system connected to the Internet can be considered completely secure. Therefore, although appropriate protective measures are adopted, the total absence of risks cannot be guaranteed.
10. Accuracy of data
The user guarantees that the data provided are true, accurate, complete and up to date.
Where data relating to third parties are provided, the user declares that they have the corresponding authorisation and undertakes to inform those persons of the content of this policy.
11. Minors
This website is not specifically aimed at minors.
Personal information should not be sent through the form or by email without the authorisation of the holders of parental authority or legal guardianship where such authorisation is required.
12. Changes to this policy
This Privacy policy may be modified to adapt it to regulatory, technical or organisational changes.
The version published on this page will be the version in force at any given time.
Last updated: 1 July 2026