GDPR Information
Data controller
D4ta, based in Terrassa (Barcelona). Contact: hola@yourd4ta.com.
Data protection contact
To exercise your rights or ask privacy questions, email hola@yourd4ta.com. We will appoint a formal DPO if processing volume requires it.
Processing purposes
Handling free audit requests, pre-contractual commercial communication, proposal preparation, contractual project delivery and cookieless aggregated web analytics.
Legal basis
Consent (GDPR Art. 6.1.a) for forms. Pre-contractual measures (Art. 6.1.b) for proposals. Legitimate interest (Art. 6.1.f) for cookieless aggregated analytics, site security and fraud prevention.
Data categories
Professional identification and contact data (name, email, company, role), optional revenue data, operational challenge description and aggregated technical browsing data.
Retention
Commercial data: while the relationship lasts or until deletion is requested, up to 24 months without a contract. Contractual data: as required by law (up to 6 years for commercial/tax obligations where applicable).
Processors
Web3Forms or FormSubmit.co (form delivery), Cloudflare, Inc. (cookieless web analytics), hosting provider. All with GDPR-compliant agreements.
International transfers
If any provider processes data outside the EEA, EU Standard Contractual Clauses or adequacy decisions apply.
Your rights
Access, rectification, erasure, restriction, objection, portability and withdrawal of consent at hola@yourd4ta.com. Response within one month.
Supervisory authority
You may complain to the Spanish DPA (www.aepd.es) or your country's authority.
Security measures
TLS encryption in transit, restricted data access, data minimisation and periodic vendor review.