Privacy

Privacy policy

This policy explains how PLANTA27° handles personal data when you visit this website, contact the studio or work with PLANTA27° on a project. It reflects the website and services as they currently operate.

1. Who is responsible for your data?

The data controller is PLANTA27°, operated by Eva Exmann in Barcelona, Spain. For questions about this policy or the use of your personal data, email email the studio.

2. What information may we collect?

When you contact PLANTA27°, we may receive your name, company or organisation, email address, telephone number, job title and the information you provide about a property, development or creative project. If we work together, we may also process proposal details, correspondence, contracts, invoicing information, project files and feedback.

The website does not currently offer user accounts, a newsletter subscription or an online contact form. Please avoid sending sensitive personal data unless it is genuinely necessary for the project.

3. Information collected when you visit

The hosting infrastructure may automatically process limited technical information needed to deliver and protect the website. This can include an IP address, browser and device information, requested pages, timestamps and security logs. PLANTA27° does not currently use advertising pixels, behavioural profiling or website analytics.

4. Why we use personal data

We use contact and project information to answer enquiries, understand a potential assignment, prepare a proposal, take steps requested before entering into a contract and deliver agreed services. The legal basis is the performance of a contract or steps taken at your request before a contract.

We may use information for invoicing, bookkeeping, tax and other statutory administration where processing is necessary to comply with a legal obligation. We may also retain limited correspondence and project records where necessary for PLANTA27°’s legitimate interests in managing the studio, protecting the website, documenting agreed work and establishing or defending legal claims.

PLANTA27° does not use enquiry details for unrelated promotional email. If direct marketing is introduced in the future, it will only be sent where a valid legal basis exists and every message will provide an easy way to opt out.

5. How long we keep information

Enquiries that do not become projects are normally deleted or anonymised within 12 months. Proposal records may be retained for up to 24 months where follow-up remains reasonably relevant. Client and supplier records are kept for the duration of the working relationship and afterwards only for the periods required by tax, accounting, contractual or legal-claims obligations. Technical logs are retained according to the hosting provider’s operational and security periods.

6. Who may receive personal data?

PLANTA27° does not sell personal data. Information may be shared only when necessary with service providers supporting website hosting, email, secure file storage, project delivery, accounting or professional advice. These providers act under their own legal duties or under appropriate data-processing terms. Information may also be disclosed to a public authority when required by law.

Project materials are not shared publicly unless this has been agreed with the client or the material is already lawfully public.

7. International transfers

Some technology providers may process information outside Spain or the European Economic Area. Where GDPR rules apply, PLANTA27° will rely on an adequacy decision, approved contractual safeguards such as the European Commission’s Standard Contractual Clauses, or another lawful transfer mechanism.

8. Cookies and similar technology

PLANTA27° has not implemented analytics, advertising or personalisation cookies on this website. The hosting platform may use strictly necessary technical mechanisms to deliver, secure or maintain the site. If non-essential cookies or analytics are added later, this policy and any required consent controls will be updated before they are activated.

9. Your data-protection rights

Depending on the circumstances, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, data portability or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent at any time without affecting earlier lawful processing.

To exercise a right, email email the studio and describe your request. PLANTA27° may ask for information needed to verify your identity and will respond within the period required by applicable law.

10. Complaints

If you believe your personal data has not been handled properly, please contact PLANTA27° first so the issue can be reviewed. You also have the right to complain to the Spanish Data Protection Agency, the Agencia Española de Protección de Datos, through www.aepd.es, or to another competent supervisory authority.

11. Security

PLANTA27° uses reasonable technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration or disclosure. No online system is completely risk-free, so information should only be sent when appropriate and through a suitable channel.

12. Changes to this policy

This policy may be updated when the website, services or legal requirements change. The current version and its update date will always be published on this page.

Last updated: 10 August 2026