Privacy policy

1. Data controller

• Controller: Daniel Lourido Lage (WebDigna)
• Tax ID (NIF): 32721205W
• Address: Camiño de Mañón, 244, 15405 Ferrol, A Coruña, Spain
• Contact email: webdigna@gmail.com

This is the email address you can write to about any matter relating to the processing of your personal data, including exercising your rights. No data protection officer has been appointed, as the cases in Article 37 of Regulation (EU) 2016/679 (GDPR) do not apply.

2. What data we collect

This website collects personal data only through its contact form ("Get a quote"). There is no user registration, account or shopping cart. The form asks for:

• Name (required)
• Business name (optional)
• Email (required)
• Message (optional): whatever you want to tell us about your project

We do not ask for a phone number, postal address or bank or payment details. In addition, by the very nature of the internet and the hosting service, technical connection data is processed, such as the IP address, the date and time of the request and the browser type, which is used to keep the site secure and working properly (see section 4). The website's loading performance is also measured anonymously and in aggregate with Vercel Speed Insights, without cookies or identification of individuals.

3. How data is obtained

The form data is what you voluntarily provide when you fill in and submit it. We do not obtain personal data about you from external sources, social networks or third parties. Technical data is generated automatically when you visit the website.

4. Purposes

We process data for the following purposes:

• Handling your enquiry: replying to your request for information or a quote and assessing your project.
• Preparing a proposal: where appropriate, preparing and sending you a service quote.
• Managing the professional relationship: if you finally hire our services, managing the engagement (which is formalised outside the website, by email or another agreed channel).
• Site security: preventing abuse, automated submissions and fraudulent use of the form. For this, the IP address is used temporarily to limit the number of submissions per minute. In addition, the website's loading times are measured anonymously (Vercel Speed Insights) to keep it working well.

We do not use form data to send you unsolicited periodic commercial communications, to build profiles or for purposes other than those stated. No automated decisions are made.

5. Legal basis

• Handling your enquiry and preparing proposals: the application of pre-contractual measures at the request of the data subject (Article 6(1)(b) GDPR): you write to us because you want a reply about a possible project and we need your contact details to give it.
• Managing the contractual relationship and complying with legal obligations: if an engagement is formalised, performance of the contract (Article 6(1)(b)) and compliance with applicable tax and accounting obligations (Article 6(1)(c)).
• Site security: WebDigna's legitimate interest in protecting the form and its systems from abuse and in maintaining the website's performance (Article 6(1)(f)), which is not overridden by users' rights and freedoms given the limited impact of the processing.

6. Retention

• Enquiries with no subsequent engagement: kept for 12 months from the last communication and then deleted.
• Clients: data arising from the contractual relationship is kept for as long as the relationship lasts and, afterwards, for the applicable legal retention periods and limitation periods for liabilities (generally between 4 and 6 years for tax and commercial matters).
• IP address used to limit submissions: held only in the server's memory for a maximum of 10 minutes and not stored permanently.
• Technical hosting logs: kept for the period set by the hosting provider, solely for security and diagnostic purposes.

Once these periods have ended, the data will be deleted or, where applicable, blocked for the time needed to deal with possible liabilities.

7. Recipients

We do not sell or disclose your data to third parties for commercial or advertising purposes. To provide the service we use the following providers, which act as data processors:

• Google LLC (Gmail): the form sends the data by email through its servers and the message is stored in the inbox of webdigna@gmail.com.
• Vercel Inc.: the hosting provider on which this website and its contact form run, and of the anonymous measurement of the website's performance (Speed Insights).

Sanity.io, the content management system we use internally to edit the texts of this website, does not receive or store personal data of people who visit the website or use the form. Data will be disclosed to public authorities or bodies only where there is a legal obligation.

8. International transfers

Google LLC and Vercel Inc. are based in the United States, so the processing of your data may involve an international transfer outside the European Economic Area. Both providers are certified under the EU–US Data Privacy Framework, recognised by the European Commission as an adequate safeguard through an adequacy decision, and otherwise apply standard contractual clauses. You can consult both providers' privacy policies for more detail on the safeguards applied.

9. Your rights

In relation to your personal data, you have the right to:

• Access your data and obtain confirmation of whether we process it.
• Rectify inaccurate or incomplete data.
• Erase your data when it is no longer necessary for the purposes for which it was collected, among other cases.
• Object to the processing of your data on grounds relating to your particular situation.
• Request restriction of processing in the cases provided for by law.
• Request portability of the data you have provided to us, where technically possible.
• Withdraw your consent at any time, where processing is based on it, without affecting the lawfulness of prior processing.

You can exercise these rights by writing to webdigna@gmail.com, stating the right you wish to exercise and, if necessary to verify your identity, attaching a copy of your ID. We will reply within a maximum of one month, extendable in the cases provided for by the GDPR.

10. Right to lodge a complaint

If you consider that the processing of your personal data does not comply with applicable regulations, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) through its online office at www.aepd.es, without prejudice to contacting us first to resolve any doubt or issue.

11. Minors

This website and its services are aimed at professionals and businesses. We do not knowingly collect data from children under 14. If we detect that such data has been provided, we will delete it.

12. Security

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration: encrypted connections (HTTPS), security headers, rate limiting of the form and hosting and email providers with their own security safeguards. No measure is absolute, so it is not possible to guarantee that systems are completely impregnable, although we do commit to acting with due diligence.

13. Updates

This policy may be updated to adapt to regulatory changes or changes in how the website works. The date of the last update appears at the top of this document. You can also read the cookie policy and the legal notice.