Privacy Policy

Controller

MIOSMEDIA ONLINE S.L.U. (operating the brand AsBuilt Mallorca) is the controller for the processing described here.

Diseminado Poligono 4, Parcela 91, 07530 Sant Llorenç des Cardassar, Illes Balears, Spain. Email: support@miosmedia.com. Telephone: +49 (0) 5975 / 900 99 84. VAT identification number: ESB72701436.

No Data Protection Officer has been appointed. Please direct all privacy requests to the contact address above.

Enquiry form

The enquiry form is the only place on this website where you can submit personal data. The following fields can be submitted: name, company, email address, telephone number, property location, property type, approximate property size, project purpose, desired deliverables, preferred project date, whether plans or project files exist, your message, and the site language you used. Only name and email address are mandatory.

Submissions are validated on the server, then stored in our project database before anything else happens. The stored record is the authoritative copy of your enquiry. Alongside your entries, the record holds a reference ID, the submission timestamp, a processing status and the status of the notification email.

The purpose of this processing is to assess your enquiry, prepare a scope and quotation, and correspond with you about it. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) and, for enquiries submitted on behalf of a company, Art. 6(1)(f) GDPR (our legitimate interest in responding to business enquiries). Enquiry data is not used for newsletters or advertising and is not sold or passed on for marketing purposes.

Notification email

After an enquiry has been stored, a notification email containing the submitted enquiry details is sent to michael.ostendorf@miosmedia.com so that the enquiry can be handled. The email is sent from our own verified sending domain; your address is never used as the sender. Your email address is set as the Reply-To address so that our reply reaches you directly.

If email delivery fails, the stored enquiry is kept and the delivery failure is recorded on the record so the enquiry can still be handled.

Abuse prevention

To prevent automated mass submissions, the form contains a hidden field that is invisible to normal visitors, and the number of submissions per connection is limited.

For the submission limit we do not store your IP address. A keyed cryptographic hash (HMAC-SHA-256) is derived from the connection identifier using a server-side secret key and only that pseudonymous value is stored. It cannot be read as an address by us, and entries are deleted automatically after 24 hours at the latest. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protecting the form against abuse).

Server logs and technical data

The application does not write the content of enquiries to its logs. No names, email addresses, telephone numbers, property addresses or message text are logged. Logging is limited to the enquiry reference ID, the processing and delivery status, timestamps and sanitised technical error information.

As with any website, connection data is necessarily processed by the hosting infrastructure in order to deliver pages to your browser.

Retention

Enquiries are kept only for as long as they are needed for the purpose for which they were submitted — handling the enquiry, any resulting project, and compliance with statutory commercial and tax retention obligations where those apply. No longer, undefined retention is intended, and records can be deleted or archived on request.

Abuse-prevention entries are deleted automatically after 24 hours.

Hosting, database and email processing

This website, its database and the transactional email delivery described above run on infrastructure operated by the Lovable platform, which acts as a processor for us. No separate analytics, advertising or customer relationship platform is connected to this website.

Specific details of that processing relationship — including the processor's subprocessors and processing locations — can be requested from us at the contact address above; we do not restate them here so that this policy does not contain unverified statements.

Web fonts

The website's typefaces (Inter and JetBrains Mono) are self-hosted and delivered from this website's own server. No font files are requested from Google Fonts or any other external provider, and no data is transmitted to a third party for typographic purposes.

Cookies and tracking

This website does not use analytics, advertising pixels, marketing trackers, social media plugins, embedded videos or map embeds, and it does not set cookies for any of those purposes. Because no consent-requiring technologies are in use, no cookie consent banner is displayed.

Project and scan data

Captures of private properties are treated as confidential. A project does not have to be published in any form: no imagery, model or dataset from a private property is published or used as a reference without explicit written permission from the client.

Where a delivered digital twin is hosted on an external platform such as Matterport, that hosting means the scan data is processed by that platform provider. Whether and how a project is hosted, who receives access, and how long the hosting is maintained is agreed per project before delivery. Access to a finished model is issued only to people the client nominates and can be withdrawn.

We do not make technical security guarantees on behalf of third-party platforms and do not claim that project data is automatically deleted after a fixed period.

Your rights

You have the right to request access to your personal data, its rectification or erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests. Requests can be sent to the contact address above.

You also have the right to lodge a complaint with a supervisory authority, for Spain the Agencia Española de Protección de Datos (AEPD).