# Privacy policy

_Updated October 2026_

## Data controller

Sestra Ingeniería y Arquitectura, S.L. · Tax ID B20871596 · Zuatzu Kalea 2-1º, Local 10, Edificio Igeldo, Pol. Zuatzu, 20018 Donostia-San Sebastián (Gipuzkoa), Spain · sestra@sestra.es · +34 943 31 66 55.

## What data we process and why

- Contact form: name, email, phone, company and message, to answer your enquiry and, where appropriate, prepare a proposal.
- “Join us” form: name, email, phone, CV and message, to manage your participation in current or future recruitment processes and, if you expressly agree, to send you information about SESTRA.
- Email and phone: the data you provide, to reply to your communication.

## Legal basis

Your consent when submitting the form (art. 6.1.a GDPR) and, where applicable, pre-contractual measures taken at your request (art. 6.1.b GDPR). You may withdraw your consent at any time.

## Retention

Contact data is kept for as long as needed to handle the enquiry and then for the applicable statutory periods. CVs are kept for a maximum of two years unless you request their deletion earlier.

## Recipients

We do not share data with third parties unless legally required. Our hosting provider (Acens Technologies, S.L.U., in the European Union) acts as data processor. If you accept analytics cookies, Google Ireland Ltd. processes browsing data on behalf of SESTRA (see the cookie policy).

## Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to sestra@sestra.es or to the postal address above. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

## Security

We apply appropriate technical and organisational measures to protect your data. Requests will be answered within one month.

---
[es](https://sestra.es/politica-de-privacidad/?format=md) · [eu](https://sestra.es/eu/pribatutasun-politika/?format=md) · [en](https://sestra.es/en/privacy-policy/?format=md)

Canonical: https://sestra.es/en/privacy-policy/