Get a price

Privacy notice

What personal data EcoViva collects on this site, why it uses it, how long it keeps it and what your rights are.

Draft: the controller’s details will be added before launch.

Who is responsible

Controller
[RAZÓN SOCIAL]
Tax ID (CIF)
[CIF]
Address
[DIRECCIÓN]
Email for privacy questions
[EMAIL]

What we collect

It depends on the form. You do not have to fill them in, but without a contact detail we cannot reply.

  • Panel quote request. Profile (private buyer or type of business), what you need, country and province of the site, approximate quantity, panel, use, when you need it, unloading on site, services, any drawings and files you attach, comments, name, company, preferred contact method, phone or email, and language.
  • House kit. House floor area, storeys, site province, whether you have a project, whether you want installation, name, and phone or email.
  • Turnkey house. If you have a design, floor area, plot province, any plans you attach, name and phone or email.
  • Trade. Type of business, company name, province or country, approximate yearly volume, your name, phone or email, and your message.
  • Panel sample. Profile, company if you give one, delivery province, name, and phone or email. We ask for the full address when we prepare the parcel.
  • Contact. Topic, name, province or country, phone or email, and your message.
  • Two-step request. Step 1 creates the request with your case, your name and your phone or email. Step 2 is optional: plans, design or permit (PDF, JPG, PNG or DWG, up to 5 files of 20 MB), plot, province and timing. They are added to the same request.
  • AI assistant. What you type in the website chat. To answer you, the text is sent to an AI model through OpenRouter. We do not keep the conversation on our server, only technical logs without its content (time and duration). The conversation stays in your browser while the tab is open. Do not type anything you would rather not share; to be contacted, use the form.
  • Technical data sent with each request. Request number, IP address, browser details, date and time, the page you sent it from and the version of this notice you saw. If you accept measurement, also the campaign you came from.

If your drawings or files include other people’s details, such as the site owner’s, only send them if you are able to share them with us.

Purposes and legal basis

  • Replying to your request and preparing a quote. Panel prices, house kits, trade terms, samples or general questions. Legal basis: steps taken at your request before a contract (Art. 6(1)(b) GDPR). If you write on behalf of a business, we use your work contact details on the basis of legitimate interest (Art. 6(1)(f) GDPR and Art. 19 of Spain’s LOPDGDD).
  • Form records and security. IP address, time and browser details, to show what was sent and to stop spam. Legal basis: our legitimate interest in a secure site (Art. 6(1)(f) GDPR).
  • News by email. Only if you tick the news box, which is never ticked in advance. Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe from any email or by writing to us.
  • Measurement and advertising. Only if you accept analytics or marketing cookies. Legal basis: your consent (Art. 6(1)(a) GDPR). Details are in the cookie policy.

We do not make automated decisions about you and we do not sell your data.

Who receives your data

  • Hosting in the EU. Requests and files are stored on a server run by our hosting provider in the European Union, which acts as our processor under a contract (Art. 28 GDPR).
  • AI assistant (OpenRouter). Chat messages go through OpenRouter, Inc. (United States) and the AI model provider, which generate the answer. This is a transfer outside the EU; it does not include the data in your requests.
  • Internal Telegram alert. When a request arrives, we get a Telegram alert with its number and type. It does not include your name, contact details or files.
  • Customer management software (CRM). Once we use one, your requests will also be stored in it, under a processing contract. We will add its name and where it stores data here.
  • Google and Meta. Only if you accept analytics or marketing cookies: Google Ireland Limited (Google Analytics 4) and Meta Platforms Ireland Limited (Meta Pixel). They may process data outside the EU.
  • Legal obligations. Public authorities, judges and courts, where the law requires us to share data.

Apart from these cases, your requests stay within the EU.

How long we keep it

Requests and their files: while we handle them and then for as long as any liability arising from that contact could apply. After that we delete them.

If you become a customer, we keep billing data for the periods required by Spanish tax and commercial law.

News list data: until you unsubscribe. Technical security data: for as long as that purpose needs it.

Your rights

You can ask us to:

Where we rely on your consent, you can withdraw it at any time. This does not affect what we did before you withdrew it (Arts. 7(3) and 15 to 22 GDPR).

Write to [EMAIL] and say which right you want to use. We reply within one month; if a request is complex, we may need up to two more months and will tell you why (Art. 12(3) GDPR).

  • give you a copy of your data (access);
  • correct it (rectification);
  • delete it (erasure);
  • limit how we use it (restriction);
  • stop using it where we rely on legitimate interest (objection);
  • send it to you or another company in a common format (portability).

How to complain

If you think we handle your data unlawfully, you can complain to the Spanish Data Protection Agency (AEPD) at www.aepd.es, or to the data protection authority in the EU country where you live or work (Art. 77 GDPR).

Children

This site is not meant for children under 14. If you are under 14, please do not send us your details.

Changes

We publish every new version of this notice on this page.

Version: 2026-10-16.