Privacy Policy

Browsing. Simply by visiting and browsing this website (www.thepaperconservationlab.com, the “Website”) of Alicia García García / The Paper Conservation Lab, no data that would allow users (“Users”) to be identified is automatically recorded, subject to the provisions of the Cookie Policy.

Access to content or services that require data. Notwithstanding the foregoing, in order to access certain information or to use certain content or services of the Website —including requesting a quote or advice—, The Paper Conservation Lab may request certain personal data from the User.

Data controller

Alicia García García (Tax ID 10875033N), operating under the trade name “The Paper Conservation Lab”, based in Villaviciosa (Asturias), Spain, is the controller of the data collected or generated as a result of Users’ access to, use of and browsing on the Website, as well as of the provision of her professional services.

Contact details: info@thepaperconservationlab.com  |  (+34) 636 965 944  |  (+44) 7729 828 842.

What categories of data do we process?

The Paper Conservation Lab processes, by way of example and without limitation, the following categories of data:

• Identification and contact data: full name, telephone number and email address.
• Data relating to the artwork or requested service: information about the item, the commission or the project for which a quote, advice or intervention is requested.
• Financial, billing and payment information arising from the contractual relationship.
• Third-party data provided by the User (for example, of the owner of the work, the author, the foundation or the institution), in respect of which the User warrants that they have previously informed them and, where necessary, obtained their consent.

How have we obtained your data?

We collect your personal data directly from you or your representative through email correspondence, professional networking platforms and other communications with us.

Purposes of the processing

The Paper Conservation Lab processes Users’ personal data for the following purposes:

• To manage and respond to requests for information, quotes and enquiries sent by email.
• To provide the professional services requested (restoration and conservation of works on paper, advisory services for collectors and institutions, expert technical reports, online advice by videoconference, maintenance and supervision of the conservation of collections, etc.), including the preparation and signing of quotes, contracts and other associated documentation.
• To manage the contractual relationship and the administrative, accounting and tax obligations arising from that relationship.
• Where the User consents or a legitimate interest exists, to inform Users about the services and activity of The Paper Conservation Lab.

Dissemination of projects on the website and social media. The Paper Conservation Lab may publish images and descriptions of the work carried out on its website (portfolio), on its social media and on its professional channels (for example, LinkedIn and Instagram). Such dissemination will only take place where there is prior consent from the relevant rights holder (owner of the work, author, foundation or institution), which may be withdrawn at any time. Consent will be obtained specifically and separately from the provision of the service.

Legal basis for the processing

The legal basis for processing Users’ personal data is as follows:

• The performance of a contract or of pre-contractual measures (Art. 6.1.b GDPR): the request for information, quotes or services and, where applicable, the performance of the service provision contract.
• Compliance with legal obligations (Art. 6.1.c GDPR): applicable administrative, commercial, tax, fiscal, accounting and civil regulations.
• The legitimate interest of the controller (Art. 6.1.f GDPR): the maintenance of the business relationship, fraud prevention, the establishment, exercise or defence of legal claims, and the sending of commercial communications about similar services to clients with a prior contractual relationship, in accordance with Article 21 of the LSSICE.
• The data subject’s consent (Art. 6.1.a GDPR): for the purposes that so require, such as the dissemination of projects on social media or the sending of communications. Consent may be withdrawn at any time, without affecting the lawfulness of the processing carried out beforehand.

Retention period

Personal data will be reained while the relationship with the User remains in force and, subsequently, for the periods legally provided for the exercise or the limitation of any liabilities arising from the processing. In particular:

• Commercial documentation (books, correspondence and business records): 6 years, in accordance with Article 30 of the Commercial Code.
• Accounting and tax documentation: for the limitation period of tax obligations (generally, 4 years) and, where applicable, that for the limitation of offences against the Public Treasury.
• Data linked to possible civil liabilities arising from the relationship: 5 years, in accordance with Article 1964.2 of the Civil Code.
• Data processed for sending commercial communications: until the User revokes their consent or objects.

Once these periods have elapsed, the data will be secure retained before being permanently pdeleted, in accordance with current data protection regulations.

Disclosures and recipients

The data will not be disclosed to third parties, except where legally required or necessary for the provision of the service. In particular, the data may be disclosed to:

• Accounting, tax and, where applicable, legal advisors, for the administrative, accounting and tax management of the activity.
• Financial institutions, for the payments collection and processing.
• The Public Administration and, in particular, the Spanish Tax Agency (AEAT), in compliance with legal obligations.
• Law enforcement authorities and the judicial bodies, where there is a legitimate request.

Likewise, in order to carry out its activity, The Paper Conservation Lab relies on service providers that act as data processors (for example, business management software —ERP—, videoconferencing, cloud storage or advisory services), which access the data solely to provide their services and in accordance with the Owner’s instructions. The corresponding data processing agreements are entered into with them in accordance with Article 28 of the GDPR.

International data transfers

As a general rule, the data is processed within the European Economic Area (EEA). Should providers or collaborators who process data outside the EEA be involved in the provision of certain services (for example, email, videoconferencing, messaging, web analytics or social media tools) or in collaboration with professionals located outside the EEA, such transfers will only take place where there is an adequacy decision by the European Commission or appropriate safeguards have been adopted in accordance with Articles 44 et seq. of the GDPR (for example, standard contractual clauses). In the case of the United Kingdom, the European Commission has adopted an adequacy decision. You may request information about these safeguards through info@thepaperconservationlab.com.

Users and clients resident in the United Kingdom

Where The Paper Conservation Lab offers its services to individuals resident in the United Kingdom, the processing of their data is subject, in addition to European Union law, to the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Such data subjects have the same rights (access, rectification, erasure, objection, restriction, portability and not to be subject to automated individual decisions), which they may exercise through the same means indicated in this Policy.

Data subjects resident in the United Kingdom may lodge a complaint with the United Kingdom supervisory authority, the Information Commissioner’s Office (ICO), through its website (www.ico.org.uk), without prejudice to their right to complain to the Spanish Data Protection Agency (www.aepd.es) or to the supervisory authority of their place of residence.

Data security

The Paper Conservation Lab adopts the technical and organisational measures necessary to ensure the security and confidentiality of personal data and to prevent its alteration, loss or unauthorised access. Only authorised persons and directly contracted service providers who have undertaken, legally and contractually, to process it confidentially and securely have access to the data.

Cookies

This website may use first-party and third-party cookies for its proper functioning and, where applicable, for analytical purposes. You can consult all the detailed information about the cookies used, their purpose and how to manage them in our Cookie Policy .

Users’ rights

The User may exercise, where applicable, the following rights regarding the processing for which The Paper Conservation Lab is responsible: access, rectification, erasure, objection, restriction of processing, portability and not to be subject to automated individual decisions. Where the processing is based on consent, the User may withdraw it at any time, without affecting the lawfulness of the processing carried out beforehand.

To do so, they must send their request by email to info@thepaperconservationlab.com, indicating the right they wish to exercise and providing the information necessary to verify their identity. As a general rule, it will not be necessary to attach a copy of the identity document, unless it is not possible to identify the applicant by another means less invasive to their privacy; in the event of reasonable doubt about identity, additional information may be requested to confirm it.

The Paper Conservation Lab will resolve the request within a maximum period of 1 month from its receipt, a period that may be extended by 2 additional months where the complexity or the number of requests justifies it; in such a case, the User will be informed of the extension and its reasons within the first month. Where the request is submitted by electronic means, the information will be provided by electronic means where possible, unless the User requests otherwise. The exercise of these rights is free of charge, without prejudice to the possibility of charging a reasonable fee or refusing to act where requests are manifestly unfounded or excessive. The controller shall bear the burden of demonstrating that a request is manifestly unfounded or excessive.

The User has the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), in accordance with Article 18 of the LOPDGDD, as well as to bring any corresponding legal actions.

Changes to the Privacy Policy

The Paper Conservation Lab reserves the right to modify this Privacy Policy to adapt it to legislative or case-law developments, Users are therefore encouraged to review this Privacy Policy periodically. When the User provides personal data of third parties, they must have previously informed them of the content of this policy and obtained their consent where necessary.

Contact

For the exercise of your rights or any questions relating to the processing of your personal data: info@thepaperconservationlab.com.

Last updated: August 2026.