1. Data controller
The data controller for your personal data is:
Company name: [COMPANY NAME]
Tax ID: [NIF/CIF]
Address: [FULL ADDRESS]
Email: [LEGAL EMAIL]
2. Purpose and legal basis for processing
We process your personal data for the following purposes and on the following legal bases: (a) Handling information requests and commercial enquiries — legal basis: legitimate interest (Art. 6.1.f GDPR). (b) Managing the contractual relationship with clients — legal basis: performance of a contract (Art. 6.1.b GDPR). (c) Measuring web traffic via Google Analytics (only if you have given consent) — legal basis: consent (Art. 6.1.a GDPR). (d) Managing the commercial pipeline and prospect follow-up — legal basis: legitimate interest (Art. 6.1.f GDPR / Art. 19 LOPDGDD). The legitimate interest consists of following up on commercial relationships initiated by the data subject through the contact form, with a view to evaluating and formalising a potential service engagement.
3. Retention period
Data will be retained for as long as necessary to fulfil the purpose for which it was collected and to comply with applicable legal obligations: Contact data: up to 3 years from last contact or until you request deletion. Client data: during the contractual relationship and up to 5 years after its termination (civil limitation period). CRM prospect data: for a maximum of 24 months from the last commercial contact, unless the data subject requests deletion beforehand.
4. Recipients and international transfers
Your data may be shared with the following recipients: Google LLC (Google Analytics) — for web traffic measurement, based in the United States. This transfer is covered by the Standard Contractual Clauses approved by the European Commission. Note: The transactional email service ([RESEND_ACTIVE: indicate if Resend applies, based in the US]) may receive contact data for sending communications. Confirm with the client whether this service is active.
5. Data subject rights
You may exercise the following rights regarding data protection by contacting [LEGAL EMAIL]:
— Right of access to your personal data.
— Right to rectification of inaccurate data.
— Right to erasure ('right to be forgotten').
— Right to restriction of processing.
— Right to data portability.
— Right to object to processing.
You also have the right to lodge a complaint with the competent supervisory authority: Spanish Data Protection Agency (aepd.es).
6. Source of the data
The personal data we process comes directly from the data subject, through the website's forms or direct contact by email or telephone.