Privacypolicy

Rauxa Lab, S.L. (Rosada Design) · NIF B05739867 · Barcelona, Spain · Email: management@rosadadesign.com

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). We collect only what we need.

Project form. Your email address, the services you are interested in, the optional budget and timeline you choose, and your message. We use them to reply to you and to prepare a proposal, and we send you a one-time email confirming that we received it. Legal basis: taking steps at your request before entering into a contract (art. 6.1.b GDPR).

Email and WhatsApp. If you write to us, we use your contact details and message to reply. Legal basis: steps before a contract, or our legitimate interest in answering enquiries (art. 6.1.b and 6.1.f GDPR). WhatsApp is a service of Meta; when you use it, Meta's own privacy policy applies.

Site assistant. The questions you type into the assistant are sent to Anthropic to generate a reply. We do not store the conversations, and we ask you not to enter personal or sensitive information. For about ten minutes we keep your IP address in memory to prevent misuse (rate limiting). Legal basis: our legitimate interest in offering and protecting the assistant (art. 6.1.f GDPR).

Newsletter. Only if you sign up and confirm by email (double opt-in): your email address, language, the date of your consent and where you signed up. We use them to send you our newsletter (new projects, news from AI and the web, and new services from the studio) every one to two months. You must be 14 or older. Legal basis: your consent (art. 6.1.a GDPR). You can withdraw it at any time with the unsubscribe link in every email; we then stop sending and delete your address from the list. Processor: Resend.

Visit statistics. Only if you accept them in the cookie settings, we measure visits with Vercel Web Analytics. It counts page views anonymously and in aggregate, sets no cookies and does not build profiles. Legal basis: your consent (art. 6.1.a GDPR), which you can withdraw at any time.

Server logs. Our hosting provider records technical data such as IP address, browser and time of the request to deliver the site securely. Legal basis: our legitimate interest in the security and operation of the website (art. 6.1.f GDPR).

We do not sell your data, we do not use it for advertising, and we do not make decisions about you by automated means.

We use service providers that process data only on our instructions, under data processing agreements: Vercel Inc. (hosting and visit statistics), Anthropic PBC (site assistant), Resend (delivery of form messages) and Google Ireland Ltd. (Google Workspace, our email).

Some of these providers are based in the United States. Transfers take place under the EU–US Data Privacy Framework where the provider is certified, or under the European Commission's standard contractual clauses.

Enquiries that do not lead to a project: up to 12 months after our last contact. Client data: for the duration of the contract and afterwards for the periods required by tax and commercial law (generally up to 6 years). Assistant questions are not stored by us. Statistics are anonymous.

You can ask to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time, without affecting earlier processing. Write to management@rosadadesign.com; we may ask you to confirm your identity.

If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

This website is not directed at children under 14.