Privacy policy

Updated:

Data controller

TODO_LEGAL_NAME_SL, tax ID TODO_NIF, registered at TODO_STREET, TODO_CP Barcelona, Catalunya. Write to [email protected] about anything concerning your data.

What we process and why

We only process what you give us through the contact form or by writing to us: your name, business name, email address, phone number and the content of your message.

  • Purpose: to answer your enquiry and prepare a quote.
  • Legal basis: your consent (art. 6(1)(a) GDPR) and pre-contractual steps taken at your request (art. 6(1)(b) GDPR).
  • We do not profile you and we make no automated decisions.
  • We do not use your data to send you marketing you did not ask for.

How long we keep it

We keep enquiries for one year from the last contact. If the contact leads to a contract, we keep the data for the duration of the relationship and afterwards for the statutory tax and commercial limitation periods.

Who we share it with

We do not pass your data to third parties except where legally required. We use the following processors, all under appropriate contractual safeguards:

  • Cloudflare, Inc. — site hosting and form processing.
  • The owner’s email provider, in order to receive and answer your message.

International transfers

Cloudflare may process data outside the European Economic Area. Such transfers rely on the European Commission’s standard contractual clauses and, where applicable, the EU–US Data Privacy Framework.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to [email protected] and stating which right you are exercising. You may also withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.

If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

Security

The site is always served over HTTPS. We apply reasonable technical and organisational measures to protect data against loss, unauthorised access and alteration.