Privacy policy

1. Who the controllers are

2. What data we process

• If you write to us through the form, WhatsApp or email: your name, your business name, your email or phone number and whatever you tell us in your message.
• If you hire a service: also the data needed to build the website and invoice you, such as your tax ID, billing address and payment details.
• If you accept analytics: Cloudflare Web Analytics collects, in aggregate, which pages are visited, from which country, with what type of device and browser, which website visitors come from and how long each page takes to load. It does not use cookies, does not store anything in your browser and does not build a profile of you.
• If you visit this website: Cloudflare, our hosting provider, automatically logs technical data such as your IP address, your browser and the date of the visit to keep the website secure and working. We also count anonymously how many times the home page is visited and the main buttons are pressed (plans, WhatsApp and form), without cookies and without storing anything that identifies you. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Content for your website and social media: the texts, photos and logos you send us to build it and, if you hire social media management, access to your accounts with the permissions you give us.

We do not ask for special categories of data (health, beliefs, etc.) and we ask you not to include them in your messages.

3. What we use it for and on what legal basis

• To answer your enquiry and prepare a quote. Legal basis: your consent, which you give by sending the message and ticking the privacy box, and pre-contractual steps taken at your request (Art. 6(1)(a) and 6(1)(b) GDPR).
• To provide the service you hire (design, development, SEO, maintenance and social media management) and support you during the project. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
• To measure visits and improve the website with Cloudflare Web Analytics, only if you accept it in the cookie notice. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from "Cookie settings" at the bottom of every page.
• To invoice and meet our tax and accounting obligations. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

We do not make automated decisions or build profiles with your data. We will not send you advertising without first asking for your specific permission.

4. How long we keep it

• Enquiries and quotes that do not lead to a contract: as long as needed to answer you and, at most, 12 months from the last contact.
• Clients: for as long as the relationship lasts and then for the legal retention periods, for example 4 years for tax obligations and 6 years for accounting and commercial records.

If you withdraw your consent or ask us to delete your data, we stop using it unless a law requires us to keep it.

5. Who we share it with

We do not sell or hand over your data to third parties, except where required by law (for example, to the Spanish Tax Agency). To work, we use providers that process data on our behalf:

• Google (Gmail email).
• WhatsApp, by Meta (messaging), if you choose to write to us there.
• Web hosting provider: Cloudflare, Inc., which also delivers the contact form messages to our email and provides visitor analytics if you accept it.
• Tax and accounting advisers, for invoicing and taxes.

6. Transfers outside the European Union

Google, Meta and Cloudflare may process data in the United States. These transfers are covered by the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023) and, where applicable, by the standard contractual clauses approved by the Commission.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw your consent without affecting processing carried out before. Write to spiwebscontacto@gmail.com with the subject "Data protection", stating which right you want to exercise and proving your identity. We will reply within one month.

If you believe we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Minors

This website is aimed at businesses and professionals. We do not knowingly collect data from children under 14.

9. Security and changes

We apply reasonable technical and organisational measures to protect your data. If we change this policy, we will update the date above and, if the change is significant, we will let you know.