Privacy Policy

1. Who is responsible for your data

Solar Master (in process of incorporation as a limited company — target May 2026). Until then, your data is managed by Julio Valderrama in his capacity as a self-employed professional, on behalf of the future company.

• Contact email: info@solar-master-malaga.com
• Operating base: Málaga, Andalusia, Spain
• Tax ID (NIF): available on request via the email above

2. What data we collect

Only the data you give us voluntarily when contacting us. When you fill the contact form or use the calculator:

• Name (required so we can address you)
• Phone or WhatsApp (required so we can contact you)
• Postal code (5 digits, to confirm service area)
• Email (optional, only if you want a written copy)
• Message (optional, context of your enquiry)
• Calculator data if you arrive from there (estimated kWp, approximate bill, municipality) — always pre-filled, never collected without explicit action from you

We do NOT collect: full postal address, ID document number, banking data, salary, or any data you have not actively given us.

3. What we use it for

Your data is used exclusively to:

• Reply to your enquiry
• Schedule the free technical visit if you request it
• Prepare the indicative quote
• Maintain contact during the commercial process

Legal basis for processing:

• Explicit consent (GDPR art. 6.1.a) — by ticking the consent checkbox on the form
• Performance of pre-contractual measures (GDPR art. 6.1.b) — to prepare your quote

4. How long we keep it

Your data is kept for 24 months from your last contact. After that period, it is permanently deleted — unless the commercial relationship is still active or the law requires a longer period (for example, installation warranties for 25 years).

If the enquiry does not result in a customer, we delete the data after 12 months without contact.

5. Who we share it with

Your data is NOT sold or shared with third parties for commercial purposes. Period.

It is processed, in technical infrastructure only, by the following providers strictly necessary for the website to operate:

• Cloudflare, Inc. (USA, adhered to EU Standard Contractual Clauses) — website hosting and CDN delivery
• Resend (USA, SCC) — transactional email when we reply to your enquiry
• Sentry (USA, SCC) — technical error monitoring (anonymised, no personal data)

We do not use third-party advertising, retargeting, or sell your information to competing installers or data brokers.

6. Your rights

The GDPR grants you the following rights over your data:

• Access — to know what data of yours we hold (art. 15)
• Rectification — to correct inaccurate data (art. 16)
• Erasure — to delete your data (art. 17, "right to be forgotten")
• Objection — to oppose a specific processing (art. 21)
• Restriction — to temporarily restrict use (art. 18)
• Portability — to receive your data in structured format (art. 20)
• Withdraw consent — at any time, without affecting previous lawful processing

To exercise any of these rights, send an email to info@solar-master-malaga.com with subject "GDPR Rights" and a copy of your ID (or equivalent document to verify you are the data subject). We respond within one month.

7. Complaints to the AEPD

If you consider that your data protection rights have not been respected, you may file a complaint with the Spanish Data Protection Agency (AEPD) — the independent supervisory authority.

Before doing so, we appreciate you contacting us first at info@solar-master-malaga.com: most issues are resolved without need for a formal complaint.

8. Cookies and similar technologies

Solar Master uses strictly necessary technical cookies (session, language preference) and, optionally, anonymous analytical cookies from Cloudflare Web Analytics — no personal identification, no cross-site tracking, no third-party sales.

We do NOT use Google Analytics, Facebook Pixel, advertising cookies, retargeting pixels or heatmaps with PII capture.

9. Changes to this policy

This policy may be updated when applicable laws, technical providers or company operations change. When we make substantial changes, we will update the date in the header and notify users with active relationships by email if we have their contact.

Minor changes (typographical, wording) are not explicitly notified.

10. Pre-SL disclosure

Solar Master will be incorporated as a limited company (SL) with target date May 2026. Until then, operations are managed under self-employed regime. When the company is formally incorporated, this policy will be updated with the official tax ID, registered address, and, if applicable, designation of Data Protection Officer (DPO).

This transparency is deliberate: we prefer to publish the real state of the company rather than simulate a legal infrastructure that does not yet exist.