Privacy policy

Last updated: 31 October 2026

This policy explains, in plain language, what personal data we process when you use this website, what we use it for and what rights you have over it. We process your data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).

Basic information

This is the summary. The full details follow below on this page.

Data controller

• Name: CAPA SIGNS, S.L. (trading as CAPA Signs)
• Tax ID (CIF): B-59729616
• Address: C/ Berlín, nº 1, naves 2 y 3, Pol. Ind. Can Torrella, 08233 Vacarisses (Barcelona, Spain)
• Email: info@capasigns.com
• Phone: +34 93 828 13 95

We have not appointed a data protection officer. If you have any question about your personal data, write to us at info@capasigns.com. Our full identification details are also shown in the terms of service and legal notice.

What data we process and where it comes from

When you use the contact form, you give us directly:

• your name;
• your email address;
• your phone number (optional);
• the content of your message and any other data you choose to include in it.

Please do not include in your message any data that is not needed for your enquiry. If you give us someone else's data (for example, a colleague at your company), make sure you are entitled to do so.

If, instead of using the form, you write to us directly at info@capasigns.com, we process the data in your message for the same purposes and on the same terms as explained in this policy.

In addition, the server hosting this website may record basic technical connection data (see "Server logs" below).

What we use your data for

• To handle your enquiry and reply to you.
• To follow up commercially on that same enquiry: for example, sending you the information, proposal or quotation you asked for, or contacting you to discuss it.

We only use your data for these purposes. We do not use it to build profiles, to make automated decisions, or to send you commercial communications unrelated to your enquiry.

Legal basis

• Consent (Art. 6(1)(a) GDPR). You give it by ticking the consent box on the form. You can withdraw it at any time, and withdrawing is as easy as giving it; withdrawal does not affect the lawfulness of processing carried out before.
• Pre-contractual steps (Art. 6(1)(b) GDPR). Where your enquiry asks us for an offer, a quotation or information in order to contract with us.
• Legitimate interest (Art. 6(1)(f) GDPR). For the server security logs described below.
• Legal obligation (Art. 6(1)(c) GDPR). Where the law requires us to keep or disclose certain data.

Is providing the data compulsory?

Your name, email address, message and the consent box are compulsory: without them we cannot handle your enquiry. Your phone number is optional. The form cannot be submitted unless the consent box is ticked.

You confirm that the data you give us is accurate and you agree to tell us if it changes.

Who we share your data with

• Third parties: we do not disclose your data to third parties unless the law requires us to (for example, following a request from a court or a competent authority).
• Hosting provider: [HOSTING PROVIDER] hosts the website and runs the contact form, which sends your message by email to the company mailbox. It acts as our data processor: it accesses the data only to provide us with that service, following our instructions and in accordance with Article 28 GDPR.

International transfers

We do not plan to transfer your data outside the European Economic Area. [Confirm with the hosting provider where its servers are located and, if there are transfers outside the European Economic Area, state the applicable safeguards here.]

How long we keep your data

• Form or email data: for as long as needed to handle your enquiry and follow it up commercially. After that, we keep it duly blocked (Art. 32 LOPDGDD), available only to judges, courts and competent authorities, for the limitation periods of any liabilities that may arise from the processing. Once those periods have expired, we destroy it.
• Server logs: for the limited period set by the hosting provider for security reasons.

Server logs

As with any web server, the hosting of this website may keep basic connection data, such as your IP address and the date and time of access, to ensure the security and proper functioning of the service. We do not use them to analyse your behaviour or to build profiles. The legal basis is our legitimate interest in the security of the website (Art. 6(1)(f) GDPR).

Your rights

You can exercise the following rights at any time:

• Access (Art. 15 GDPR): find out whether we process your data and obtain a copy.
• Rectification (Art. 16): correct inaccurate or incomplete data.
• Erasure (Art. 17): ask us to delete your data.
• Restriction of processing (Art. 18): ask us to keep your data but not use it, in the cases provided for by law.
• Portability (Art. 20): receive the data you gave us in a structured, commonly used format.
• Objection (Art. 21): object to the processing on grounds relating to your particular situation.
• Withdraw your consent (Art. 7(3)): at any time, without affecting earlier processing.

To exercise them, write to info@capasigns.com or by post to CAPA SIGNS, S.L., C/ Berlín, nº 1, naves 2 y 3, Pol. Ind. Can Torrella, 08233 Vacarisses (Barcelona, Spain), stating which right you want to exercise. If we have reasonable doubts about your identity, we may ask you for additional information to confirm it.

We will reply within one month of receiving your request (this period may be extended in the cases provided for by the GDPR, and we would tell you if so). Exercising your rights is free of charge, except in the cases of manifestly unfounded or excessive requests foreseen in the GDPR.

Complaints to the supervisory authority

If you believe we are processing your data in breach of the rules, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es (Art. 77 GDPR), without prejudice to any other administrative or judicial remedy. Before doing so, we would appreciate the chance to resolve the issue if you write to us first.

Security

We apply appropriate technical and organisational measures to protect your data against loss, alteration, and unauthorised processing or access (Art. 32 GDPR). Even so, no transmission over the internet is completely secure.

Cookies, map and third-party links

• Cookies and tracking: this website sets no cookies, neither its own nor third-party ones, and does not use analytics, advertising, tracking pixels or social media plugins. Fonts are served from our own server, with no requests to third-party font services. More information in the cookie policy.
• Map: the map on the contact page is our own image, made from OpenStreetMap data and served from our server. Viewing it involves no connection with third parties.
• Links: the links to our YouTube channel and to Google Maps ("Get directions", "Open in Google Maps") are ordinary links, with no embedded content. When you click them you leave this website and the privacy policy of the site you go to applies; for Google, the controller for users in the European Economic Area is Google Ireland Limited (privacy policy).

Minors

This website is aimed at businesses and professionals. Children under 14 should not send us personal data without the consent of the person who holds parental authority or guardianship over them (Art. 7 LOPDGDD).

Changes to this policy

We may update this policy, for example because of changes in the law or in how the website works. The date of the latest update is always shown at the top.

Contact

If you have any question about this policy or the processing of your data, write to us at info@capasigns.com or call +34 93 828 13 95. You can also read the terms of service and legal notice and the cookie policy.