LEGAL / RGPD

Privacy policy

Last updated: TODO: [DATE]

TODO: Structural draft. The bracketed data and the full text must be reviewed and completed before publishing; this is not legal advice.

1. Data controller

TODO: [NAME OR COMPANY NAME] · Tax ID: [NIF/CIF] · Address: [FULL ADDRESS], Tarragona (Spain).

Privacy contact: [email protected].

2. What data we process and why

Contact form: name, business name, phone or WhatsApp and the message you write. We use them to handle your free assessment request and get in touch with you.

NFC/QR stands and cards: each time a stand is used we record the code, date and time, approximate country and city, and device type. We do not store the IP address or any data that identifies the person.

Web analytics: we use Cloudflare Web Analytics, which measures visits in aggregate and without cookies.

3. Legal basis

Your consent (Art. 6.1.a GDPR) when you submit the form and accept this policy, and the performance of pre-contractual measures at your request (Art. 6.1.b). Legitimate interest (Art. 6.1.f) for aggregated analytics and site security.

TODO: review legal bases.

4. Retention

We keep form data for TODO: [RETENTION PERIOD] or until you ask for its deletion. Stand usage records, not being personal data, are kept while the stand is active.

5. Recipients and processors

To provide the service we use providers that process data on our behalf: Cloudflare (hosting, Turnstile anti-spam protection and analytics), Resend (sending the form email) and Google (destination mailbox).

TODO: confirm data processing agreements and safeguards for international transfers (standard contractual clauses / EU-US Data Privacy Framework).

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to [email protected]. If you believe we have not handled your data properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).