Privacy policy

Data controller

What data is collected, and what is not

This website is static and has no database of its own. The only things sent to a server of ours are what you submit through the contact form, so that it reaches us, and the questions you type into the chat.

So personal data is only processed in three cases: if you write to us, by email or through the form (name, email address, company and phone if you provide them, whatever you write in the message and, for the form, the IP address it comes from, used to stop abusive submissions), if you use the chat (the text of your questions and the IP address they come from) and, if you consent, the browsing data collected by Google Analytics.

Purpose and legal basis

Email and contact form: to answer your enquiry and, where appropriate, prepare a quote. The legal basis is your own request (pre-contractual measures) and our legitimate interest in replying to whoever writes to us.

Website usage statistics: to learn which pages are of interest and improve the site. The legal basis is your consent, given in the cookie notice and withdrawable at any time.

Chat: to answer your questions about AMSET. The legal basis is your own request when you type it, and our legitimate interest in preventing abuse of the service (that is what the IP address is used for: limiting how many questions can be asked).

How long it is kept

Emails and form messages are kept for the duration of the relationship and afterwards for as long as needed to handle possible legal liabilities.

Analytics data is kept by Google according to the measurement property settings, with a usual maximum of 14 months for user-level data.

Chat conversations are not stored on any server of ours: the question is used to generate the answer and then discarded. The conversation only stays in your browser while the tab is open. The IP address is used in memory for usage limits and appears in the server’s technical logs, which are kept for a limited time.

Who else sees it

Google Ireland Limited, as the Google Analytics provider, only if you accept analytics cookies. This may involve international transfers, covered by the safeguards provided by the supplier itself (standard contractual clauses and the applicable adequacy framework).

Cloudflare, as the network that serves this site and protects it from attacks, processes visitors’ IP addresses as part of the delivery service itself.

Google, as the provider of the AI model that generates the chat answers.It receives the text of your questions and the conversation, but not your IP address or identity, because the request reaches it from our server. It processes them under its terms of service, which may involve international transfers, with the safeguards described above.

The email provider, when you write to us.

No data is shared with anyone else and no profiling for advertising purposes is carried out.

Your rights

You can request access, rectification, erasure, restriction, objection and portability of your data, and withdraw consent at any time. To exercise them, just write to the contact email stating which right you wish to exercise.

If you believe your request was not handled properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

Security

The site is always served over HTTPS. With no public database or admin panel, the exposed surface is limited to the site files themselves.