Skip to content

Privacy policy

Last updated: 17 September 2026.

This policy explains how we process the personal data of people who visit the website mida.cat or write to us through it, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the protection of personal data and guarantee of digital rights (LOPDGDD).

1. Data controller

  • Controller: MIDA arquitectes, SCP
  • Tax ID (NIF): J55424717
  • Address: Carrer Leiva 5, ground floor 3, 08014 Barcelona, Spain
  • Email: info@mida.cat

The studio is not required to appoint a data protection officer. For any privacy question, please write to the address above.

2. What data we process and why

Contact form

  • Data: name, email address, the content of the message and confirmation that you have accepted this policy.
  • Purpose: to reply to your enquiry and, if you ask for a quote or a commission, to handle the preliminary steps.
  • Legal basis: your consent (Art. 6(1)(a) GDPR), given by ticking the box before sending the message, and, where the enquiry relates to a commission, steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
  • How it works: the message is sent by email to info@mida.cat and is not stored in the website’s database. The form does not use cookies or external anti-spam services: it relies on a hidden field and a timing check that store no data.

All fields are needed to reply to you. If you do not complete them, we will not be able to handle the enquiry this way; you can always write to us directly at info@mida.cat.

Email

If you write to us directly, we will process the data you send (address, name, content and attachments) in order to reply, on the basis of your consent or our legitimate interest in answering the communications we receive (Art. 6(1)(f) GDPR).

Browsing the website

Like any web server, the server hosting the website automatically logs technical data about each visit (IP address, date and time, requested page, browser and operating system). This data is used only to keep the website secure and working properly, on the basis of our legitimate interest (Art. 6(1)(f) GDPR), and is not used to identify you or to build profiles.

This website does not use cookies, analytics tools, advertising or third-party content (typefaces and images are served from the same server). See the cookie policy.

3. How long we keep the data

  • Enquiries that do not lead to a commission: for as long as needed to reply and, at most, 12 months from the last communication.
  • Enquiries that lead to a commission: for the duration of the professional relationship and afterwards for the periods set by applicable law (tax, commercial and professional liability in building).
  • Server technical logs: for the limited period set by the hosting provider for security purposes.

4. Who we share the data with

We do not share personal data with third parties unless required by law.

To provide the service we use providers that process data on our behalf, under a data processing agreement in accordance with Article 28 GDPR:

  • Web hosting and email: 10DENCEHISPAHARD, S.L. (cdmon), with servers in the European Union.

We do not transfer data outside the European Economic Area.

5. Your rights

You may exercise the following rights at any time:

  • Access: find out whether we process your data and obtain a copy.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: ask us to delete it when it is no longer needed.
  • Objection and restriction of processing.
  • Portability: receive the data you have provided in a structured format.
  • Withdraw your consent at any time, without affecting the lawfulness of prior processing.

To exercise them, email info@mida.cat stating the right you wish to exercise. If we have reasonable doubts about your identity, we may ask for additional information to confirm it. We will reply within one month.

If you believe we have not processed your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

6. Minors

This website is not aimed at children under 14. If you are under that age, please do not send us personal data without the consent of your parents or guardians.

7. Security

We apply appropriate technical and organisational measures to protect data: encrypted connection (HTTPS), restricted access to the website administration, regular software updates and minimisation of the data collected.

8. Social media

The website only contains links to the studio’s LinkedIn and Instagram profiles; there are no buttons or embedded content from these networks. If you interact with us on those platforms, their own privacy policies apply.

9. Changes to this policy

We may update this policy to reflect legal changes or changes in how the website works. The date of the latest update always appears at the top of the text.