Privacy

The controller of this site and of the data that arrives through it is [PENDING: full name or registered company name], with [PENDING: tax ID] and an address at [PENDING: postal address].

For anything to do with privacy, write to us at [email protected].

Browsing the site does not require signing up or identifying yourself. Data only reaches us in these situations:

• If you write to us. When you send the contact form we save the name, the email address, the message and any catalogue items you have marked in our database, and your own email program also opens with the message already written, so it reaches us as an email too. If you email us directly, we receive that email.
• Visit statistics, without cookies. When a page loads we note which page it is, which site you came from (the domain only), the campaign tags in the link if it has any (utm), the site language, the device type, browser and operating system, the country if the network serving the site tells us, and how long you keep the page in view. We do not store your IP address: from it and the browser we compute an anonymous fingerprint that changes every day, which only serves to count visitors within a single day and does not let us recognise you the next day or know who you are. If your browser sends a "Do Not Track" or "Global Privacy Control" signal, nothing is recorded.
• Technical logs from the server that hosts the site: IP address, date and time, page requested and browser. The hosting itself generates them so the site works and so abuse can be spotted.
• If someone signs in to the access area. It is an internal area for our own use and is not linked from the site. Signing in uses an email address, which receives a one-time code, or a Google account, which passes us the basic profile details (name, email and photo, if there is one).

Nothing else. The site does not ask for payment details, documents or special category data.

Whatever reaches us through the form or by email we use to read it and reply to you and, if work comes out of it, to manage that relationship. We only look at visit statistics in aggregate, to know which pages are read and how people get to them. The access area data is used only to let in whoever is meant to get in.

We do no profiling, make no automated decisions and send no advertising. If there is ever a newsletter, it will be a separate, explicit subscription, and we will say so here.

The legal basis is your consent when you write to us and, if we end up working together, performance of the contract. The server logs and the access area rest on the legitimate interest of keeping the site up and secure, and the visit statistics on the legitimate interest of knowing, without identifying anyone, what works on the site.

We use no analytics, advertising or social network cookies. The visit statistics described above work without cookies and without storing anything in your browser, and we use no third-party analytics tools. That is why you will not see a banner asking for permission: there is nothing to consent to.

In the services catalogue, the items you mark are saved in your browser's local storage (localStorage), so they are still there if you come back. They are only the item numbers and they do not leave your device, except when you take them to the contact form: they then travel in the page address. You can remove them from the tray itself or by clearing the site's data in your browser.

Session cookies are only created if someone signs in to the access area. They are technical, needed to keep the session open, and exempt from consent.

If the way we measure visits ever changes, we will say so on this page before switching it on.

The site loads nothing from third parties in your browser: the fonts and the library icons are served from our own server. If a site's icon is missing, it is our server that asks DuckDuckGo's icon service (icons.duckduckgo.com) for it, and that service only sees the domain name, not your IP address.

Some providers do handle data on our behalf: the site's hosting ([PENDING: hosting provider]), which sees the technical data needed to serve the pages; Neon, which hosts our database (it stores the form messages and the visit statistics) and, through Neon Auth, runs the access area: our server asks it on each visit whether a session is open (without a session no cookie is created); and Google, only if you choose to sign in with that account.

The emails you send us pass through your email provider and ours ([PENDING: provider of the contact mailbox]).

We do not sell, rent or pass on your data to anyone else. We would only disclose it if a legal obligation required it.

We keep the form messages and the emails you send us for as long as the conversation makes sense and, if it ends in a commission, for the periods required by tax and commercial rules.

Visit statistics contain nothing that identifies you; we keep them for [PENDING: retention period for visit statistics].

Access area accounts are kept while they are in use; you can ask us to delete them.

The server's technical logs are kept for as long as the hosting provider sets, usually a few weeks.

When something is no longer needed, we delete it.

Over your data you can exercise, at any time and free of charge:

• Access: knowing what data of yours we hold.
• Rectification: correcting anything that is wrong.
• Erasure: asking us to delete it.
• Objection: asking us to stop handling it.
• Restriction: asking us to freeze it without deleting it.
• Portability: receiving it in a format you can take with you.

To exercise them, write to [email protected] saying what you want. We will reply within a month at the latest.

If you think we have not done it properly, you can complain to the Spanish Data Protection Agency (aepd.es).

The site is always served over HTTPS and we manage email with the usual account and access measures. As we barely store any data, the exposed surface is minimal: that is the best measure of all.

Even so, no system is foolproof and we cannot promise absolute security.

This site is aimed at companies and professionals, not at children under 14, and we do not collect their data on purpose. If anything like that reaches us by mistake, we delete it as soon as we spot it.

If what we collect or who handles it changes, we update this page and its revision date. There is no small print that changes without notice.