Privacy Policy

Bonanova Insular S.L.
CIF B10600427
Registered office: Calle Son Buit 8, 1-2, 07015 Palma de Mallorca, Balearic Islands, Spain

Bonanova Insular S.L. operates the trade marks Creative Interior Design and CID Studio. To exercise any of the rights in section 6, or for any question about this policy, use the Privacy & GDPR form on the contact page.

No data protection officer has been appointed. The company is not required to appoint one.

When you send an enquiry. The forms on this site ask for your name and your email address, and for a telephone number, a company, a publication or a link where that is relevant to the enquiry. Everything else is what you choose to write in the free-text field. Please put in it only what you are comfortable sharing at a first contact. Unannounced developments in particular.

The time of submission and which form was used are recorded with the message, so an enquiry reaches the right desk.

Automatically, only if you accept. If you consent to analytics or marketing cookies, pseudonymous identifiers, device and browser information, the referring address, pages viewed and interactions are collected as set out in the Cookie Policy. Decline, and none of it is stored.

Special categories of data, such as health, beliefs or political opinions, are not collected, and no attempt is made to identify you beyond what you have chosen to give.

• Answering your enquiry and, where it follows, discussing a possible engagement. Legal basis: your consent (Art. 6.1.a GDPR), and the steps taken at your request before entering into a contract (Art. 6.1.b).
• Measuring how the site is used, and measuring the studio’s advertising. Legal basis: your consent, given in the cookie dialog (Art. 6.1.a).
• Keeping the site secure and meeting legal obligations. Legal basis: legitimate interest and legal obligation (Art. 6.1.f and 6.1.c).

Enquiries are kept while the conversation is live and, if it leads nowhere, for one year afterwards, so that a returning enquiry has its context. Where an engagement follows, the correspondence is kept for the term of the commercial relationship and then for the periods Spanish commercial and tax law require.

Analytics data is retained under the settings of Google Analytics 4 (14 months by default). Hotjar recordings are retained under the settings of that account.

These processors are used:

• Google Ireland Ltd. Google Tag Manager, Google Analytics 4 and Google Ads. Transfers to the United States are covered by the EU–US Data Privacy Framework adequacy decision.
• Hotjar Ltd. (Malta). Aggregated measurement of how pages are used, through heatmaps and session recordings. See Hotjar’s privacy policy.
• Brevo (Sendinblue SAS, France). Delivery and storage of the messages sent through the forms on this site. Servers in the European Union.
• Hetzner Online GmbH (Germany). Hosting.
• Calendly LLC (United States). Appointment scheduling, and only if you click “Schedule an online meeting”. Nothing is sent to Calendly before that.
• Google Ireland Ltd. The studio’s email is on Google Workspace, so correspondence with the studio is stored there.

Data is not sold, and it is not shared with anyone else except where the law requires it.

You have the right of access to your data, and the right to have it corrected, erased, restricted or ported. You may object to processing based on legitimate interest. You may withdraw a consent at any time, which does not affect what was done before you withdrew it.

Use the Privacy & GDPR form. A reply follows within one month.

If you believe your rights have been breached you may complain to the Spanish Data Protection Agency, Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid. aepd.es

Traffic to this site is encrypted in transit (TLS). The site keeps no database of its own. Messages are passed to the processor named above. Keys and credentials are held outside the public web root and never reach your browser.

This policy may be revised. The date at the top of the page is the date of the current version.