Last updated: 9 November 2026.

This page explains in plain words what personal data we process, why, for how long, who we share it with and how you can exercise your rights. We comply with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Who is responsible

Pintores Hnos Burrueco S.L. · Tax ID (CIF) B44851061
Registered address: C/ Córdoba nº 25, 3º-12, 29640 Fuengirola (Málaga), Spain
Email: dymburrueco@hotmail.com
Phone: 627501348 (Manolo) · 627501349 (Rafael)

For any question about your data, write to that email address or call the phone numbers above.

2. What we use your data for

a) Contact and quotes from this website

If you call us, email us or ask for a quote, we use your name, phone number, email and what you tell us about the job to reply, prepare the quote and, if you accept it, carry out the work.

b) Handling insurance claims commissioned by insurers

We carry out painting and repair work commissioned by insurance companies (for example, Santa Lucía) for their policyholders. The insurer gives us the data needed to handle the claim: name, phone number, address of the property, claim details and, where applicable, the name of the injured party. We use it to contact you, agree the visit and the date of the work, assess and carry out the repair, and justify the work to the insurer. We also receive the photos of the property and the messages you send us about the claim.

c) WhatsApp assistant with artificial intelligence

To coordinate the repair we use an assistant that talks to you on WhatsApp (on this page, "the assistant"; its name is MireIA). It processes your messages, the photos you send and the claim data mentioned above, in order to ask you what is needed, arrange the appointment and notify the member of our team handling your case. Section 8 below explains how it works.

d) Legal obligations

We keep invoices and accounting records and answer requests from the authorities when the law requires it.

We do not use your data to send you advertising and we do not sell it to anyone.

3. Legal basis

• Contact and quotes: taking steps at your request before a contract and, if you hire us, performing the contract (art. 6(1)(b) GDPR).
• Claims commissioned by an insurer: performing the repair service provided to you as policyholder or injured party and commissioned by the insurer (art. 6(1)(b) GDPR), and our legitimate interest in organising and documenting the commissioned work (art. 6(1)(f) GDPR).
• WhatsApp assistant: the same basis as the previous point, since it is a way of coordinating the work. You can stop using it at any time and ask to be served by a person.
• Legal obligations (invoicing, accounting, taxes): art. 6(1)(c) GDPR.

4. What data we process

• Identity and contact: full name, phone number, email.
• Address of the home or premises where the work is done.
• Claim or job data (file number, description of the damage, appointments).
• Photos of the property that you send us and the content of your messages.
• Invoicing data where applicable (tax ID, address).

We do not ask for specially protected data (health, beliefs, etc.). Please do not include it in your messages or photos.

Claim data comes from the insurer that commissions the work; the rest comes from you.

5. Who we share it with

Who	Why
The insurer that commissions the work (for example, Santa Lucía)	To report on the progress of the work and justify the repair. The insurer processes your data as an independent controller; see its own privacy policy.
Meta Platforms Ireland Ltd. (WhatsApp Business)	The messaging service we use to talk to you. Meta processes the messages under its own privacy policy.
Google (Gemini artificial intelligence service)	The AI model the assistant uses to understand and write messages. It acts as a processor on our behalf.
Our team (the person handling the case)	Receives notices and photos by WhatsApp to run the job.
Technical and service providers (hosting, email, tax and accounting advisers)	To provide services to us. They are bound by confidentiality and process data only on our instructions.
Public authorities	Only when the law requires it.

We do not pass your data to other companies for commercial purposes.

6. International transfers

Meta and Google operate in several countries and may process data outside the European Economic Area, in particular in the United States. Those transfers rely on the safeguards each provider offers under the GDPR (a European Commission adequacy decision, such as the EU-US Data Privacy Framework, or standard contractual clauses). You can ask us for more information by email.

7. How long we keep the data

• Contacts and quotes that do not lead to a contract: as long as needed to handle your request and then, only blocked, for the limitation periods of possible liabilities.
• Claims and completed jobs: while the work is being handled and then, blocked, for the legal limitation periods (generally up to 5 years, art. 1964 of the Spanish Civil Code).
• Invoices and accounting documents: as long as commercial and tax law require (generally 6 years).
• WhatsApp conversations with the assistant and photos: while the claim is handled and then for the same legal periods as above. You may ask us to delete them earlier if they are no longer needed.

After those periods the data is deleted or anonymised.

8. The WhatsApp assistant with artificial intelligence

9. Your rights

You can:

• Access your data and know how we process it.
• Rectify it if it is inaccurate.
• Have it erased when it is no longer necessary or you withdraw your consent, unless we must keep it by law.
• Object to processing based on our legitimate interest.
• Ask us to restrict processing.
• Ask for portability of the data you gave us, where applicable.
• Withdraw any consent you gave us, without affecting what was done before.
• Not be subject to decisions based solely on automated processing (we do not take any).

To exercise them, write to dymburrueco@hotmail.com stating your name, which right you want to exercise and a way to contact you; we may ask you to prove your identity. We will reply within one month. If you are a policyholder and your request concerns data held by the insurer, you can also contact the insurer.

10. Complaints

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (AEPD): www.aepd.es, C/ Jorge Juan, 6, 28001 Madrid. We would appreciate it if you wrote to us first so we can try to solve it.

11. This website and cookies

This website may use Google measurement tools (Google Tag Manager and Google Analytics), which use cookies for visit statistics. They are only switched on if you accept them in the cookie notice; if you reject them or do not choose, they are not loaded. You can change your decision at any time under "Cookie settings" in the page footer. Full details (name, duration and how to delete them) are in the cookies policy. The pages are informational: they have no sign-up forms and to contact us you use email or phone.

12. Security and changes

We apply reasonable technical and organisational measures to protect your data against loss, unauthorised access or misuse. We may update this policy; the date above shows the latest version.