Privacy Policy

1. Data controller

2. Data we collect

Through the contact form we collect the following personal data:

• Full name
• Email address
• Phone number (optional)
• Organisation or company (optional)
• Message content

We do not collect special categories of personal data, nor do we carry out automated profiling.

3. Purpose of processing

• Managing and responding to enquiries submitted through the contact form.
• Assessing the fit between the received enquiry and the firm's services.
• Maintaining the pre-contractual or contractual relationship arising from the initial contact.

4. Legal basis

The legal basis for processing is the express consent of the data subject (Art. 6(1)(a) GDPR), given by accepting this policy when submitting the form, and the legitimate interest in responding to pre-contractual enquiries (Art. 6(1)(b) GDPR).

5. Retention period

Data will be retained for as long as necessary to handle the enquiry and, where applicable, for the duration of the contractual relationship. Once concluded, data will be kept in a blocked state for the applicable statutory limitation periods (generally three years for civil claims and five years for commercial obligations).

6. Recipients

Data are not transferred to third parties except as required by law. The website is hosted on Cloudflare Pages (Cloudflare Inc., USA), whose international transfers are covered by the standard contractual clauses approved by the European Commission. Form submission may be supported by a transactional email provider (e.g. Resend or Web3Forms) subject to the same safeguards.

7. Data subject rights

You may exercise the following rights against the controller at any time:

• Access: to know what data we process about you.
• Rectification: to correct inaccurate or incomplete data.
• Erasure: to request deletion of your data when no longer necessary.
• Restriction: to request that we suspend processing in certain circumstances.
• Portability: to receive your data in a structured, commonly used format.
• Objection: to object to processing based on legitimate interest.
• Withdrawal of consent: at any time, without retroactive effect.

To exercise your rights, send an email to [email protected] indicating the right you wish to exercise and attaching a copy of your identity document.

If you consider that the processing does not comply with applicable regulations, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

8. Security

We implement the technical and organisational measures necessary to ensure the security of your data and prevent its alteration, loss, unauthorised processing or access, having regard to the state of the art, the nature of the data and the risks to which it is exposed.

9. Cookies

This website does not use proprietary tracking or advertising cookies. Browser local storage may be used exclusively for the technical operation of the site.

10. Amendments

We reserve the right to update this policy to adapt it to legislative changes or changes to the services provided. The current version will always be available on this page.