Privacy Policy
Last updated: Oct. 21, 2026
This policy explains what personal data Services Costa Blanca collects, why we collect it, who we share it with, how long we keep it and what rights you have over it. It is written to meet GDPR Articles 13 and 14 of Regulation (EU) 2016/679, the Spanish Organic Law 3/2014 (LSSI) and the guidance of the AEPD, the Spanish Data Protection Agency.
1. Who is the data controller
Company: Aleksandar Gogev
Tax identification number (NIF/CIF): Z2214705V
Registered address: Calle Francisco Verdu 2C, Alicante, Spain
Privacy contact: srvcostablanca@gmail.com · Contact us
You can also reach us at any time through the privacy settings in your dashboard, which is faster than emailing and is recorded with a date.
2. Why we process your data
| Purpose | Data used | Legal basis |
|---|---|---|
| Creating and running your account | Email, name, password hash, preferred language | Performance of a contract (Art. 6.1.b) |
| Matching you with tradespeople in your area | Town, job adverts, applications, availability | Performance of a contract (Art. 6.1.b) |
| Letting you contact each other through the site | Messages, contact requests, email and phone, once revealed | Performance of a contract (Art. 6.1.b) |
| Reviews and public ratings | Star rating and comment text | Legitimate interest (Art. 6.1.f) |
| Keeping the site secure and preventing abuse | IP address, user agent, request logs | Legitimate interest (Art. 6.1.f) |
| Measuring how the site is used | Pages visited and performance data | Consent (Art. 6.1.a), switchable off |
| Measuring whether our campaigns work | Campaign and advertising measurement | Consent (Art. 6.1.a), switchable off |
| Meeting tax and consumer-protection duties | Invoices and transaction records, where they exist | Legal obligation (Art. 6.1.c) |
3. Why we are allowed to use it
- Contract. We need your details to give you the accounts, adverts and messaging the service is made of. Without them we cannot run your account, and this is not optional for you.
- Legitimate interest. We keep server logs, rate-limit abusive traffic and block fraud. We do this to protect the service and everybody using it, and we balance that against your rights — we keep the data short-lived and we never use it for advertising.
- Consent. Analytics cookies, marketing measurement and optional communications are switched off until you say yes. You can withdraw that at any time from “Cookie Settings” in the footer or from your privacy settings, and withdrawing is as easy as agreeing.
- Legal obligation. Spanish tax law requires certain records to be kept for a set period, so we cannot delete them early if you ask.
When we rely on legitimate interest we have carried out the balancing test the GDPR requires, and you have the right to object — see your rights below.
4. Your contact details stay private
Your email address and phone number are never displayed on any public page. They are held privately, and they are released only when you approve a contact request from another member.
- Until you approve a request, the other person can send you a message through the site but cannot see or reach your email or phone number.
- If you approve, the details are released for that contact only. They are not published on your profile and are not added to any mailing list.
- If you decline, nothing is shared and the requester is not told who you are or whether you are the account they thought you were.
- Messages are filtered before they are stored: anything that looks like an email address, phone number or payment request is redacted and the sender is warned, so the site cannot be used to launder contact details past the approval flow.
Photographs. Every photo you upload has its metadata removed before it is saved — including GPS coordinates, which phone cameras record automatically and which would otherwise publish the exact location of your home. This applies to every image the site accepts, not just the ones you choose to keep.
5. How long we keep it
Visit records. When you load a page we record which page, your IP address and your browser's user agent string on our server, so we can keep the site working and see which pages are useful. Nothing is written to your device: no analytics cookie, no local storage, no advertising identifier. That is why these records are not governed by the cookie choices further down this page.
| Data | Retention |
|---|---|
| Account details and profile | Until you close your account, then deleted within 30 days |
| Job adverts and their photographs | Until you delete them, or 12 months after the ad closes |
| Messages and conversations | 24 months after the last message, then deleted |
| Applications and offers | 24 months after the job closes |
| Reviews you wrote | Kept in anonymised form, because other members rely on the rating |
| Server and security logs, including IP address | Up to 90 days, or 5,000 records, whichever comes first |
| Automatic IP bans, held on the blocked-address list | Until the ban expires or a staff member releases the address |
| Server-side visit records: which pages were requested, from which IP address, with your browser's user agent string | Up to 90 days, or 5,000 records, whichever comes first |
| Your cookie choices | 6 months, after which we ask again |
| Record of you accepting these terms | Kept while your account exists, as evidence of consent |
6. Who we share it with
We do not sell your personal data and we do not share it with advertisers. We share it only with the categories of provider below, and only to the extent each needs it to do the job we have asked of it.
- Hosting infrastructure — the provider that stores the database and serves the site, on our instruction and only as processor.
- Google and Facebook — only if you choose to sign in with them. They act as an independent controller for the sign-in itself and receive your email address and name. We never send them your messages, jobs or reviews.
- Email delivery provider — carries messages such as password resets and notifications.
- Professional advisers and authorities — where we are legally obliged to disclose, or to defend our legal rights.
7. Transfers outside the European Economic Area
Some of the providers above are established outside the European Economic Area, principally in the United States. Where your data reaches them we rely on a lawful transfer mechanism: the European Commission's Standard Contractual Clauses, attached to the provider contract, or an adequacy decision where one exists.
- You can ask us for a copy of the clauses we have in place, and for the name of the provider concerned, using the contact details in section 1.
- Where a transfer cannot be safeguarded by clauses, we stop the transfer rather than send the data.
8. Security
We encrypt traffic with HTTPS, store passwords only as one-way hashes so that a database leak cannot reveal them, and restrict staff access to what each person needs. No system is perfectly secure, but we treat protecting your data as a continuing duty and we will tell you and the AEPD if a breach is likely to put your rights at risk.
9. Your rights
You can exercise all of these yourself, immediately, from your privacy settings:
- Access (Art. 15) and portability (Art. 20) — download everything we hold about you as JSON or ZIP, including your profile, adverts, applications, messages and reviews.
- Rectification (Art. 16) — correct anything wrong, on your profile page.
- Erasure (Art. 17) — delete your account and your data. Reviews you wrote about other people are kept in anonymised form rather than deleted, because other members rely on those ratings.
- Objection (Art. 21) — object to processing based on legitimate interest, and stop optional messages.
- Withdraw consent (Art. 7.3) — switch off analytics or marketing at any time, from your privacy settings or from “Cookie Settings” in the footer.
10. Complaints
If you believe we are handling your data badly, you may complain to the AEPD (Agencia Española de Protección de Datos), C/ Jorge Juan 6, 28001 Madrid, Spain, or at aepd.es.
11. Changes to this policy
If we change this policy materially we will update the date at the top and, where the change affects your rights, ask you to accept the new version and record that you did.