1. Data Controller Information
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), you are hereby informed that the personal data collected through this website is processed under the responsibility of:
- Trade Name: Costa Soniqa
- Postal Address: Avenida Ramblas de Oleza. 19, 03189, Orihuela Costa, Alicante, Spain
- Telephone: (+34) 666 142 100
- Email for Data Protection Enquiries: info@costasoniqa.com
- Official Website: https://costasoniqa.com
2. Principles Applied to Personal Data Processing
Costa Soniqa applies the principles set forth in Article 5 of the GDPR:
- Principle of Lawfulness, Fairness and Transparency: Personal data is processed on a legitimate legal basis and with full transparency toward the user.
- Principle of Purpose Limitation: Data is collected only for explicit, specified and legitimate purposes explained prior to collection.
- Principle of Data Minimisation: We request only the data strictly necessary for the purpose for which it is processed.
- Principle of Accuracy: We keep data accurate and updated.
- Principle of Storage Limitation: Data is kept for no longer than necessary for the purposes of processing.
- Principle of Integrity and Confidentiality: Data is processed ensuring adequate security, protection against unauthorized processing, loss or destruction.
3. What Personal Data Do We Collect?
We may collect and process the following categories of personal data:
- Contact & Project Enquiries: When you complete our contact or project enquiry form, we collect your first name, last name, email address, telephone number, client category (e.g. Homeowner, Architect, Interior Designer, Developer, Audio Dealer), area of interest (e.g. Prodigio Audio models, Smart Home, Experiences, Beach Homes), and any details provided in your message.
- Technical & Browsing Information: IP address, device type, browser version, operating system, and anonymised analytics regarding how you interact with our pages.
4. Purposes and Legal Basis for Processing
| Purpose | Legal Basis | Retention Period |
|---|---|---|
| Responding to enquiries, consultation requests, and project specifications submitted via our contact forms. | Consent of the data subject (Art. 6.1.a GDPR) and pre-contractual measures (Art. 6.1.b GDPR). | For the time necessary to resolve your request and follow up on the project proposal, or until consent is withdrawn. |
| Sending editorial updates, news, or brand announcements (Soniqa Lounge updates) where requested. | Express consent of the user (Art. 6.1.a GDPR). | Until the user unsubscribes or withdraws consent. |
| Ensuring website security, preventing abuse, and managing technical operation. | Legitimate interest of the controller (Art. 6.1.f GDPR). | Technical log retention periods not exceeding statutory requirements. |
5. Data Recipients & Third Parties
Costa Soniqa does not sell, rent, or trade your personal data to third parties under any circumstances. Data may only be accessed by trusted service providers (data processors) who assist in web hosting, email infrastructure, and IT maintenance, all bound by strict Data Processing Agreements in compliance with GDPR Art. 28.
6. International Data Transfers
Our primary servers and hosting infrastructure are located within the European Economic Area (EEA). If any auxiliary cloud service provider transfers data outside the EEA, such transfer is governed by European Commission Standard Contractual Clauses (SCCs) or adequate data protection frameworks.
7. Your Rights Under GDPR & LOPDGDD
You have the right to exercise the following rights at any time, free of charge:
- Right of Access: Obtain confirmation as to whether your personal data is being processed, and access such data.
- Right of Rectification: Request correction of inaccurate or incomplete data.
- Right of Erasure (Right to be Forgotten): Request deletion of your data when it is no longer necessary for the purposes for which it was collected.
- Right to Restriction of Processing: Request temporary restriction of data processing in specified circumstances.
- Right to Data Portability: Receive your personal data in a structured, commonly used and machine-readable format.
- Right to Object: Object to processing based on legitimate interests or direct marketing.
- Right to Withdraw Consent: Revoke any consent previously granted without affecting the lawfulness of prior processing.
To exercise any of these rights, send a written request with proof of identity to info@costasoniqa.com or by post to Avenida Ramblas de Oleza. 19, 03189, Orihuela Costa, Alicante, Spain, indicating "Data Protection Rights" in the subject line.
If you consider that your rights have not been adequately satisfied, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) at www.aepd.es.
8. Security Measures
Costa Soniqa adopts state-of-the-art technical, physical, and organisational security measures (including SSL/TLS encryption, secure server firewalls, and strict access controls) to protect your personal data from loss, unauthorized access, alteration, or disclosure.