[TEMPLATE — have this reviewed by a lawyer and fill in every PLACEHOLDER before launch.]
Who is responsible for your data
The data controller is [PLACEHOLDER: full name], [PLACEHOLDER: NIF/NIE], [PLACEHOLDER: address], email [PLACEHOLDER: email].
What we collect and why
| When | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form | Name, email, phone (optional), message, the page and development you wrote from | To answer your request | Your request (steps before a possible agreement) / legitimate interest |
| Partner introduction (only if you tick the box) | The same details | To pass them to the named partner so they can contact you | Your consent |
| “Email me this breakdown” | Email, the calculator link | To send you the link | Your request |
| Newsletter (double opt-in) | Email, language, date of consent | To send occasional emails about new developments | Your consent |
We also store which version of the consent text you saw and the campaign tags (utm) in the page address, if any. We do not store your IP address or browser details with your request.
Spam protection
Our forms use Cloudflare Turnstile to check that a request comes from a person. Cloudflare processes technical data about your device and connection for this purpose. [PLACEHOLDER: link Cloudflare’s Turnstile privacy information.]
Who processes data for us
- Cloudflare — website hosting, form processing and database, spam protection, cookieless visitor statistics.
- Resend — sending emails.
- The partner named in the form — only if you tick the box to share your details.
[PLACEHOLDER: confirm each provider’s data processing agreement and, for providers outside the EU, the transfer safeguard they rely on (e.g. EU–US Data Privacy Framework or standard contractual clauses).]
Maps and videos
Map pages load map images from OpenStreetMap’s servers, which receive your IP address to deliver them. Review pages with a video use YouTube’s privacy-enhanced mode (youtube-nocookie.com) or Vimeo; the video provider receives data when the video loads or plays.
How long we keep data
[PLACEHOLDER: e.g. contact requests for N months after the last message; newsletter subscribers until you unsubscribe; unconfirmed sign-ups deleted after N days.]
Your rights
You can ask for access to, correction or deletion of your data, ask us to restrict or stop processing it, ask for a copy in a portable format, and withdraw consent at any time (this does not affect processing before you withdrew). Write to [PLACEHOLDER: email]. Every newsletter email has an unsubscribe link.
If you think we have not handled your data properly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es).