Home · Legal

Privacy policy

This English version is provided for convenience. In case of discrepancy, the Spanish version prevails.

Last updated: 5 October 2026

This policy explains how we process your personal data when you contact us through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights (LOPDGDD).

1. Data controller

Controller: Urko Lema Rodríguez
Tax ID (NIF): 58029779C
Address: Francisco Longa, 1, 7.º D, 01010 Vitoria-Gasteiz, Euskadi, Spain
Email: [email protected]

2. What data we process

Only the data you provide to us when you use the contact form, book the initial meeting in our calendar, or write to us by email or on LinkedIn: your name, company, email address, telephone number (if you give one), the content of your enquiry or the reason for the meeting and, if you book, the day and time you choose. Please do not include special categories of data (health, beliefs, etc.): we do not need them.

This website does not collect browsing data for analytics or advertising purposes.

3. What we use it for

To reply to your enquiry.
If you book the initial meeting, to organise it: creating the appointment in our calendar and sending you the invitation with the video call link.
If you request one, to prepare a proposal.
If you go on to engage our services, to manage the relationship with your company.

We do not send marketing communications or make automated decisions using your data. We do not process it with cloud-based artificial intelligence services.

4. Legal basis

Your consent (Art. 6(1)(a) GDPR), which you give when you submit the enquiry or book the meeting, and which you may withdraw at any time.
Taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR), when you ask us for a proposal or a meeting.

5. How long we keep it

For as long as necessary to deal with your enquiry. If you do not go on to engage our services, we delete your data within a maximum of one year from the last contact. If you do, we keep it for as long as the relationship lasts and, afterwards, for the periods required by law.

6. Who we disclose it to

We do not disclose your data to third parties, except where required by law. Our website protection provider (Cloudflare) and our email, calendar and video call provider (Google Workspace) may access it, solely to provide their service to us and under a data processing agreement. If you book the initial meeting, Google will send the invitation to your email address. The website and enquiries are hosted on our own servers in Spain. If any of these providers were to process data outside the European Economic Area, they would do so with the safeguards required by the GDPR.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability by writing to [email protected] and stating which right you wish to exercise. We will reply within a maximum of one month.

If you believe that we have not handled your data properly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es).

8. Security

We apply appropriate technical and organisational measures to protect your data against loss, unauthorised access or alteration. The website is served over an encrypted connection (HTTPS).

9. Changes to this policy

If we change this policy, we will publish the new version here, with its date.