Privacy and personal data policy

1. Data controller

Controller	Aldo Pesquera
Tax ID (NIF/CIF)	Y7302188R
Address	C/ Lope de Vega 265 · Barcelona · 08018 · Spain
Email	info@lignamilano.com
Technical web channel	webform@lignamilano.com

2. Data we may process

• First and last name, if you provide them.
• Email, phone or WhatsApp.
• Information about your project: product, materials, dimensions, quantity, desired date, indicative budget, files, images or references.
• The content of messages sent through the form, web assistant, email, WhatsApp or social media.
• Basic technical data: date, time, page of origin, technical session identifiers, anti-spam records and security logs.

We do not request special categories of data. Please avoid sending sensitive information that is not necessary to assess your project.

3. Purposes of processing

Purpose	Legal basis
Respond to enquiries received through the form, web assistant, WhatsApp, email or social media.	User consent and pre-contractual interest.
Prepare quotes, validate technical feasibility and manage custom orders.	Pre-contractual measures or contract performance.
Send communications related to the enquiry or order.	Legitimate interest and/or contract performance.
Manage security, anti-spam, technical traceability and abuse prevention.	Legitimate interest and legal obligation where applicable.
Comply with tax, accounting or administrative obligations if a contract exists.	Legal obligation.

4. Web assistant

The Ligna Milano assistant is a button-guided menu that runs entirely in your browser. It does not use artificial intelligence and does not send your messages to any external provider while you chat.

Your data only leaves the browser if, at the end of the flow, you choose to provide your name and an email or mobile number and accept this policy. At that point, and only then, a summary of your enquiry together with your contact details is sent to the Ligna Milano team by email, so we can reply to you or prepare a quote.

Please do not use the assistant to send particularly sensitive data, confidential documents that are not necessary, or third-party information without authorisation.

5. Recipients and processors

We may work with providers necessary to operate the website and respond to enquiries, including:

• Hosting and email provider (IONOS).
• SMTP/IMAP email provider for sending and receiving messages from the form and the web assistant.
• WhatsApp/Meta, Instagram, TikTok or other platforms if the user chooses to contact us through those channels.
• Tax advisers, consultants, public administration or authorities where there is a legal obligation.

Some providers may process data outside the European Economic Area. In such cases, we will seek to use appropriate safeguards in accordance with applicable regulations, such as standard contractual clauses or other recognised mechanisms.

6. Retention periods

• Enquiries without a contract: for as long as necessary to respond and carry out reasonable follow-up, normally up to 12 months.
• Quotes and projects: throughout the commercial relationship and the periods needed to handle warranties, claims and legal obligations.
• Tax or accounting documentation: for the legally required periods.
• Technical and anti-spam logs: for as long as necessary for security, diagnostics and abuse prevention.

7. Rights of users

You can exercise your rights of access, rectification, erasure, objection, restriction of processing, portability and withdrawal of consent by writing to info@lignamilano.com. To protect your data, we may request additional information to verify your identity.

You can also lodge a complaint with the Spanish Data Protection Agency (AEPD) if you consider that the processing does not comply with the regulations.

8. Security

We apply reasonable technical and organisational measures to protect personal data, including restricted storage of sensitive configurations, anti-spam control, diagnostic logs and separation between operational data and the website's public files.

9. Changes to this policy

We may update this policy when services, providers, features, legal requirements or operational criteria change. The version in force will be the one published on this page.

In case of any discrepancy between language versions, the Spanish version prevails.