Tell us about your project
Legal

Privacy policy

Last updated: 16 October 2026

This is an English translation, provided for convenience. If it differs from the Spanish version, the Spanish version prevails.

This policy explains what personal data we process when you visit myrtus.es or write to us, what we use it for and what rights you have. It complies with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and with Spain's Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).

In short

  • Controller: María Dolores Gálvez Martínez ("Myrtus").
  • Purpose: to answer your enquiry and, if you ask us to, prepare a proposal.
  • Legal basis: your consent and the pre-contractual steps you ask us to take.
  • Recipients: we do not sell or pass on your data to third parties.
  • Rights: access, rectification, erasure, objection, restriction and portability, by writing to dev@myrtus.es.
  • Cookies: the public pages only use one functional cookie, if you change the language with the switcher, and we never resell your personal data.

1. Data controller

  • Owner: María Dolores Gálvez Martínez, trading as "Myrtus".
  • Tax ID (NIF): 48703658P
  • Address: C/ Reina Victoria 18, 30820 Alcantarilla, Murcia (Spain)
  • Email: dev@myrtus.es

Given the volume and type of data we process, we are not required to appoint a data protection officer. For any privacy question, write to the email address above.

2. What data we process

If you write to us through the contact form:

  • your name, your email address and the message you send us;
  • technical data recorded with the message to prevent abuse and automated submissions: your IP address, your browser (user agent), the date and time of submission and the language of the page you wrote from.

We need your name, email and message to be able to reply. Without them we cannot deal with your enquiry.

Please do not include special categories of data (for example, health data) or other people's data in your message. If you give us data about third parties, you confirm that you are entitled to do so.

If you are just browsing: the server temporarily records technical data about each visit (IP address, page requested, date and browser) to keep the site secure and fix errors. We do not use it to identify you or to build profiles.

Visit statistics: to know which content is of interest, we count visits to myrtus.es and to the Fincas demo with Umami, an analytics tool installed on our own servers. It records the page visited and the referring page, the contact or demo buttons you click, the actions you take in the demo, the type of browser, operating system and device, the language, and the approximate country and region. Your IP address is only used at the moment of the visit, to work out the country and to group the pages viewed in the same visit anonymously, and it is not stored. It does not use cookies or store anything on your device, and with this data we cannot know who you are.

3. What we use it for

  • Answering your enquiry and keeping up the conversation you start with us.
  • Preparing a quote or proposal, if you ask us to.
  • Protecting the site and the form against spam, abuse and attacks.
  • Producing visit statistics, without identifying you, to improve the site and our products.

We do not send advertising or newsletters, we do not make automated decisions and we do not build profiles with your data.

4. Legal basis

  • Answering your enquiry: your consent, which you give when you submit the form after ticking the box (Art. 6(1)(a) GDPR), and, if you ask us for a quote, taking pre-contractual steps at your request (Art. 6(1)(b) GDPR).
  • Security of the site and the form: our legitimate interest in protecting our systems and preventing abuse (Art. 6(1)(f) GDPR).
  • Visit statistics: our legitimate interest in knowing how the site is used in order to improve it (Art. 6(1)(f) GDPR), with data that does not identify you.

You can withdraw your consent at any time by writing to us. This does not affect anything we did with it before.

5. How long we keep it

  • Contact messages (with their technical data): for as long as the conversation lasts and, if we do not end up working together, for a maximum of 12 months from the last contact. After that we delete them.
  • If you become a client: the data is kept for the duration of the relationship and, afterwards, for as long as legal obligations require (for example, tax and accounting), and until any possible liabilities expire.
  • Server technical logs: 14 days, unless they are needed to investigate a security incident.
  • Visit statistics: 25 months. After that they are deleted automatically.

6. Who else has access

We do not sell or pass on your data to third parties. Only these service providers have access to it, and only as far as necessary:

  • Hosting: the site and the messages are stored on servers managed by the Myrtus team, located in Spain.
  • Email: if we reply by email, the conversation is kept by our email provider, Inertinc Industries (Molina de Segura, Murcia), with servers in Germany (European Union).

We may also disclose data to authorities and courts when required by law.

7. International transfers

We do not transfer your data outside the European Economic Area.

8. Your rights

You can exercise these rights over your data at any time:

  • Access: find out what data of yours we process.
  • Rectification: correct any data that is inaccurate.
  • Erasure: ask us to delete it.
  • Objection and restriction: ask us to stop processing it or to process it only in certain cases.
  • Portability: receive it in a structured, commonly used format.

To exercise them, write to dev@myrtus.es stating which right you want to exercise. If we have reasonable doubts about your identity, we may ask you to prove it. We will reply within one month.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es). We would appreciate it if you wrote to us first so we can try to resolve it.

9. Security

We apply appropriate technical and organisational measures to protect your data: encrypted connections (HTTPS), access to messages restricted to the team with authentication, backups and keeping systems up to date.

10. Minors

The site is aimed at businesses and professionals. If you are under 14, please do not send us your data.

11. Cookies

The public pages of myrtus.es and the Fincas demo do not set analytics or advertising cookies, and we never resell your personal data. Fonts and all other resources are served from our own server, with no connections to third parties.

The only cookie on the public pages is lang, a functional cookie: if you change the language with the switcher in the header, it stores your choice ("es" or "en") for one year so the site opens in that language next time. It is only created when you ask for it, contains no personal data and does not require consent (Art. 22.2 of Spain's LSSI-CE). You can delete it from your browser at any time.

For visit statistics (section 2) we use Umami, installed on our servers. It does not use cookies or store or read information on your device, so it does not require your consent (Art. 22.2 LSSI-CE). If you still prefer us not to count your visits, enable a content blocker or the "Do Not Track" option in your browser.

The administration area, accessed only by the team, uses technical session cookies to log in securely. They are essential for that service and do not require consent (Art. 22.2 LSSI-CE).

12. Changes to this policy

We may update this policy when the site, our providers or the law change. The date of the last update is shown at the top of this page.