Privacy policy
Draft pending legal review. This text is a standard template that a legal adviser must review and approve before it is final. The details in brackets ([RAZÓN SOCIAL], [NIF]…) are still to be filled in.
Who the controller is
- Controller: [RAZÓN SOCIAL]
- Tax ID (NIF): [NIF]
- Address: [DOMICILIO]
- Email for privacy matters: [EMAIL DE CONTACTO]
- Data protection officer: [DPD: contact details if one has been appointed; otherwise delete this line]
What data we process
When you write to us through the contact form:
- Your contact details: name, email address and, if you give them to us, phone number and company.
- What you tell us about your project: what you want to achieve, what your company does and how many people work there, when you would like to start, the approximate budget, how you prefer us to contact you and the message you write.
- The language you view the website in, so we can reply in it.
- Where you came to the website from: the campaign parameters of the link (utm_source, utm_medium, utm_campaign, utm_content and utm_term), the domain of the website that linked to us and the first page you saw. It does not include your IP address or any identifier of your browser.
Please do not include special categories of data (health, beliefs, religion…) or other people's data in your message.
Why we use it and on what legal basis
- To reply to your request and, if you wish, prepare a proposal. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR). [CONFIRMAR CON EL ASESOR. If consent (Article 6(1)(a)) is chosen instead, the form needs a checkbox.]
- To learn which channels bring us requests, using the origin of the visit. Legal basis: our legitimate interest in measuring which communications work (Article 6(1)(f) GDPR). [CONFIRMAR CON EL ASESOR.]
- To measure visits to the website in aggregate, only if the analytics tool is on (see below). [CONFIRMAR CON EL ASESOR the legal basis.]
We do not make automated decisions or build profiles with your data.
How long we keep it
[PLAZO DE CONSERVACIÓN: for example, as long as needed to handle your request and, if no business relationship follows, no more than [N] months.] After that, we keep it blocked only while liabilities may arise, and then delete it.
Who we share it with
We do not pass your data on to third parties unless the law requires it. These providers process it on our behalf, under a data processing agreement (Article 28 GDPR):
- [ENCARGADOS DEL TRATAMIENTO: website hosting, request database, reply automation, email and, if enabled, analytics. Name each provider and where it is located.]
[TRANSFERENCIAS INTERNACIONALES: state whether any provider processes data outside the European Economic Area and under which safeguard. If none does, say so or delete this paragraph.]
Third-party resources
The website's fonts load from Google Fonts and Fontshare. To serve them, your browser connects to those services and, as with any connection, sends them your IP address. [VALORAR CON EL ASESOR: keep this notice or host the fonts on our own domain.]
Analytics
[HERRAMIENTA DE ANALÍTICA: provider name, what it measures and where it stores the data. If it is not enabled, delete this section.] The website only loads it when it is configured, without cookies, and uses it to count visits in aggregate: pages viewed, where visitors come from, whether the contact form is started or sent and whether "Book a call" is clicked.
Your rights
You can ask us to access, correct or delete your data, to object to or restrict its processing, and to receive it in a format you can take to another controller (portability). Where processing is based on your consent, you can withdraw it at any time. Write to us at [EMAIL DE CONTACTO] saying which right you want to exercise.
If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
Last updated: [FECHA].