Privacy Policy

This Privacy Policy explains how Costa Blanca Wholesale S.L. collects, uses and protects personal data when you visit the ISB® Building System website, contact us or submit information about a building project.

1. Scope of this Privacy Policy

This Privacy Policy applies to personal data processed through costablancawholesale.com, including data submitted through contact or project enquiry forms, technical information generated when browsing the website, and analytics data processed subject to your cookie and consent preferences.

2. Personal data we may collect

2.1 Information you provide directly

When you contact us or submit a project enquiry, we may process information such as:

• your name;
• email address;
• telephone number, where provided;
• project location;
• client or professional profile;
• project type and project stage;
• approximate project size;
• project objectives, requirements and other information included in your message;
• your privacy consent where required.

2.2 Technical and usage data

When you use the website, certain technical information may be processed automatically, including IP-related information, browser and device data, requested pages, timestamps, security logs and similar technical data necessary to operate and protect the website.

2.3 Analytics data

Where you provide the required consent, we use Google Analytics 4 to obtain statistical information about how visitors use the website. Analytics may include information such as pages visited, session activity, device or browser type, approximate geographic information and interaction data.

Google Analytics is only intended to operate in accordance with the consent choices made through our cookie consent system.

3. Purposes and legal bases for processing

4. Contact and project enquiries

Information submitted through our contact or project enquiry forms is used to review your request, respond to you and, where appropriate, assess the possible next steps for your project.

Depending on the nature of the enquiry, information may be shared with relevant professional collaborators where this is reasonably necessary to evaluate or progress the project and where an appropriate legal basis exists.

Please do not submit sensitive personal data through the project enquiry form unless it is strictly necessary and specifically requested.

5. Cookies and consent management

We use Complianz to manage cookie consent and visitor privacy preferences. Necessary technologies may be used to operate the website and remember consent choices.

Optional analytics technologies are intended to operate only in accordance with the consent choices selected by the visitor.

More detailed information about cookies, technologies, categories and applicable retention periods is available in our Cookie Policy.

6. Google Analytics 4

We use Google Analytics 4 as a statistical tool to understand website usage and improve the performance and usefulness of the website.

Google Analytics may process technical and usage information on behalf of the website operator. The Google Analytics account is configured under Google's applicable data processing terms. IP anonymisation or equivalent privacy protections are applied as provided by Google Analytics 4.

Analytics processing that requires consent is subject to your cookie preferences.

7. Recipients and service providers

Personal data may be processed by service providers that support the operation of the website and our business activities, including:

• website hosting and technical service providers;
• website security and maintenance providers;
• email and communication service providers;
• analytics providers where consent has been granted;
• professional advisers or project collaborators where necessary;
• public authorities where disclosure is required by law.

Service providers processing personal data on our behalf are expected to process such data only for authorised purposes and subject to appropriate contractual and data protection obligations.

8. International data transfers

Some service providers may process information from locations outside the European Economic Area.

Where personal data is transferred internationally, we seek to rely on an applicable adequacy decision or appropriate safeguards recognised under applicable data protection law, such as standard contractual clauses, where required.

9. Data retention

Personal data is retained only for as long as reasonably necessary for the purposes for which it was collected.

Project and contact enquiries may be retained while the enquiry or potential project remains active and for a reasonable follow-up period thereafter. Data may be retained longer where necessary to establish, exercise or defend legal claims, comply with accounting or regulatory requirements, or fulfil contractual obligations.

Technical and analytics information is retained according to the applicable service configuration, consent status and legitimate operational or security requirements.

10. Security

We apply reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

No internet-based system can provide an absolute guarantee of security. However, we review and maintain appropriate safeguards having regard to the nature of the information processed and the risks involved.

11. Your data protection rights

Subject to the requirements and limitations of applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive personal data in a portable format where applicable;
• withdraw consent at any time where processing is based on consent;
• object to certain forms of automated decision-making where applicable.

To exercise your rights, contact: info@costablancawholesale.com .

We may request reasonable information necessary to verify your identity before responding to a data protection request.

12. Right to lodge a complaint

If you believe that your personal data has been processed in breach of applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.

In Spain, the supervisory authority is the Agencia Española de Protección de Datos (AEPD).

Website: www.aepd.es

13. Automated decision-making

We do not currently use personal data collected through this website to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning website visitors.

14. Third-party websites

The website may contain links to third-party websites. We are not responsible for the privacy practices or content of websites operated by third parties. Visitors should review the privacy information provided by those third parties before submitting personal data to them.

15. Changes to this Privacy Policy

We may update this Privacy Policy where necessary to reflect changes in the website, our services, legal requirements or data processing practices.

The most recent version published on this website will apply.

16. Contact

For questions concerning this Privacy Policy or the processing of your personal data, please contact:

Last updated: 22 August 2026