⚠ PROVISIONAL TEXT, PENDING LEGAL REVIEW. This is not a privacy policy.
What we collect From the contact form: organisation, type of organisation, contact name, email, phone and town if you provide them, and the message you write. If you arrive from the calculator, the quote you generated is stored too.
What for To answer your request and, if the project goes ahead, to manage it. Never for advertising, never shared with third parties.
IP addresses Your IP address is not stored. A hash of it is kept, solely to limit submissions per hour and stop spam.
Accounts If we give you access to the project workspace, authentication is handled by Kinde, which processes your email and user identifier.
Legal basis To handle your request and prepare the offer, pre-contractual steps taken at your request (Art. 6(1)(b) GDPR). To run the project and its maintenance, performance of the contract. To issue and keep receipts, a legal obligation (Art. 6(1)(c)). For the hashed IP address and the other anti-abuse measures on the form, our legitimate interest in keeping the service standing (Art. 6(1)(f)).
Who else processes them Only whoever is needed for this to work, and always as a processor: the hosting provider running the application and its database, the outbound mail service that delivers notifications, the storage holding project documents, and Kinde for authentication. No disclosures to third parties for their own purposes, no advertising, no selling of data. Where any of these providers processes data outside the European Economic Area, the transfer relies on the European Commission's standard contractual clauses.
How long they are kept · Requests that do not become a project: 3 years from the last contact, in case you write again and so we do not ask you the same things twice.
· Contractual data and accounting documents: 6 years from the close of the financial year (Art. 30 of the Spanish Commercial Code) and, for tax purposes, for as long as the corresponding obligation has not lapsed.
· Hashed IP address: only for as long as the submission-limit window lasts.
· Backups: 7 days. This is why an erasure is not quite instantaneous: the data leaves the live system at once and the last backup copy at most a week later, with that copy used for nothing but disaster recovery.
Automated decisions There are none. The calculator estimates a price from what you choose; it does not profile anyone or decide anything about any person.
Your rights You may request access to your data, its rectification or erasure, object to the processing, ask for it to be restricted and receive your data in a portable format. Just write to us through the contact form on this site, stating which right you are exercising; we answer within one month. If you believe we have got it wrong, you may complain to the Spanish Data Protection Agency (www.aepd.es).