Controller and purpose
The data controller must be identified before contact forms are enabled or personal data are collected. The data protection officer's contact details must also be provided where appointment of an officer is legally required. Details you choose to send would be used only to respond to and manage your enquiry, on the applicable legal basis. Do not include health data, criminal records, identity documents or other sensitive information in an initial enquiry.
Retention and your rights
The controller must specify retention periods, recipients, processors and how to exercise rights of access, rectification, erasure, objection, restriction and portability, as well as the right to complain to the AEPD. This policy must be reviewed and completed before publication or processing personal data.
Last updated: 29 October 2026.
Back to home