Privacy Policy

This privacy policy applies to the processing of personal data of customers and/or users of the website https://adaptatuweb.com, hereinafter the WEBSITE, owned by the company IMAT COMUNICACIÓN, S.L., hereinafter the DATA CONTROLLER.

Applicable Regulations

Our Privacy Policy has been drafted in accordance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter EU GDPR 2016/679, and, insofar as it does not contradict the aforementioned Regulation, with the provisions of Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, hereinafter LOPDGDD 3/2018.

By providing us with their data, the customer and/or user declares that they have read and understood this Privacy Policy and gives their consent to the processing of their personal data according to the applicable legal basis in each case.

Additional Information on Data Protection

The data controller is:

• Identity: IMAT COMUNICACIÓN, S.L.
• Tax ID (N.I.F.): B60690153
• Address: Carrer Pins de Can Caralleu, 4 – 08017 Barcelona (Spain)
• Telephone: (+34) 609 730 569
• Email: proyectos@adaptatuweb.com

Purposes and Legal Basis of the Processing

a) General purposes

The DATA CONTROLLER processes the personal data provided by its customers and/or users for the following purposes:

• Purpose: To contact the data subject, respond to requests for information received, and answer the queries submitted. To provide the requested services, including administrative, accounting, and tax management, as well as the processing of payments through external providers. To send commercial communications related to our products and/or services by electronic or conventional means, provided that the data subject has given consent for this purpose.
• Legal basis legitimising this processing: Performance of a contract to which the data subject is a party or the application, at the data subject’s request, of pre-contractual measures. Legitimate interest. The consent of the data subject, which may be withdrawn at any time.

b) WEBSITE electronic forms

The DATA CONTROLLER processes the personal data provided by customers and/or users through the electronic data collection forms available on the WEBSITE for the purposes identified below:

Regarding the “Contact Form” and other enquiries (those submitted through the email accounts listed on the WEBSITE):

• Purpose: To contact the data subject, respond to requests for information received, and answer the queries submitted, as well as to send electronic commercial communications about our products and/or services, provided that the data subject has given consent for this purpose.
• Legal basis legitimising this processing: The consent of the data subject, which may be withdrawn at any time.

When the data requested in the electronic forms are mandatory, the DATA CONTROLLER will indicate this at the time of collection, and failure to provide them will mean that the corresponding request cannot be processed.

What Type of Data Do We Process?

The DATA CONTROLLER will process the following categories of personal data, depending on the relationship the user maintains with the WEBSITE:

a) Data provided directly by the user

Those voluntarily provided by the user through the forms available on the WEBSITE (contact, contracting, or others), such as: first and last name, email address, telephone number, and any other information included in their message or communication.

In the event of contracting services, additional data necessary for administrative, tax, and accounting management may also be processed, such as identification and contact data associated with the customer. The user guarantees the accuracy and updating of the data provided.

b) Data derived from contracting and payment management

When the user contracts services on the WEBSITE, data related to the transaction will be generated (for example: contracted product, amount, payment status, or transaction identifiers).

Bank or payment data are not processed directly by the DATA CONTROLLER, but by payment service providers such as Stripe, which manage the transaction securely and in accordance with their own privacy policies.

c) Data derived from the use of the website

In a limited manner, connection and browsing data necessary for the proper functioning, security, and improvement of the WEBSITE may be obtained, such as IP address, technical identifiers, device type, or browser type.

These data may be processed through analytics and security tools (for example, services from Google LLC such as Google Analytics or reCAPTCHA), applying anonymisation or pseudonymisation measures whenever possible.

d) Data for commercial purposes

If the user expressly authorises it, their identification and contact data may be processed for sending commercial communications related to the DATA CONTROLLER’s services.

No data from external sources are processed, nor are automated profiles created that produce legal effects on the user.

For What Purpose Do We Use Your Personal Data?

The personal data you provide will be processed for the following purposes:

• To manage and respond to enquiries or requests submitted through the contact forms available on the WEBSITE.
• To maintain communication with users who request it, including sending information related to the enquiry submitted.
• To manage the contracting of the products and/or services offered on the WEBSITE, including order processing and the administrative, accounting, and tax management arising from the contractual relationship.
• To manage payments for contracted services through the Stripe payment platform. In this regard, the data necessary to process the transaction will be handled directly by this payment service provider, and the DATA CONTROLLER will not have access to the user’s full banking details.
• To comply with applicable legal obligations, particularly in tax, accounting, and data protection matters.

Record of Processing Activities

The personal data collected through the contact form form part of the Data Controller’s Record of Processing Activities (RPA), maintained and updated in accordance with the provisions of the GDPR and the LOPDGDD.

Recipients

The personal data of users may be communicated to:

• Service providers acting as data processors, necessary for the provision of the service, such as web hosting, IT maintenance, or email management services, who will process the data exclusively on behalf of the DATA CONTROLLER and in accordance with its instructions. In this case, hosting and email services are managed by IONOS Cloud S.L.U., with servers located in Spain and subject to European data protection regulations.
• Payment service providers, such as Stripe, which will be involved in managing the financial transactions arising from the contracting of products or services. In relation to such processing, Stripe may act as an independent controller, in accordance with its own privacy policy.
• Competent authorities or public bodies when there is a legal obligation to disclose the data.

Outside of these cases, no data transfers to third parties are envisaged.

International Transfers of Personal Data

Certain service providers used by the DATA CONTROLLER may involve international transfers of data outside the European Economic Area.

In particular:

• Google LLC, provider of services such as Google Analytics 4 and reCAPTCHA, may carry out international data transfers to the United States, covered by the EU–US Data Privacy Framework adequacy decision.
• Stripe may involve international data transfers, especially to the United States or other countries in which it operates, in the context of payment processing and fraud prevention.

These transfers are carried out with the appropriate safeguards in accordance with the GDPR, through the adoption of legally valid mechanisms such as European Commission adequacy decisions, standard contractual clauses, or other suitable safeguards.

In this regard, no international data transfers are made to countries that do not offer an adequate level of protection without applying the guarantees required by current regulations.

Retention Periods

Personal data will be retained for the time strictly necessary to fulfil the purposes for which they were collected and, in any case, for the periods required by the applicable regulations, which shall prevail over any other criterion.

In particular:

a) Customer data (service contracting and payment management)

Customers’ personal data will be retained for the duration of the contractual relationship and, once it has ended, for a period of 6 years, in compliance with legal obligations in tax and commercial matters.

Additionally, they may be retained duly blocked for the limitation periods of possible legal liabilities.

Data related to financial transactions will be processed, with regard to the payment process, by providers such as Stripe, in accordance with their own retention policies.

b) Data derived from enquiries, contact forms, and information requests

Personal data will be retained for the time necessary to handle and manage the request submitted.

Once resolved, they may be kept for a maximum period of 1 year, for the purpose of monitoring the relationship or addressing potential liabilities arising from the processing, unless the user requests their deletion earlier.

c) Data processed for commercial purposes

If the user has consented to receiving commercial communications, their data will be retained as long as such consent remains in force or until they request deletion or object to the processing.

In all cases, once the indicated periods have elapsed, the data will be deleted or, where appropriate, blocked, remaining available only to Public Administrations, Judges, and Courts for the attention of possible liabilities arising from the processing during their limitation period.

Rights of Data Subjects

Customers and/or users of the WEBSITE may exercise the following rights before the DATA CONTROLLER, insofar as they are applicable: access to personal data, rectification, erasure (right to be forgotten), restriction of processing, data portability, objection to processing, objection to being subject to automated individual decision-making, and, when processing is based on consent, the right to withdraw such consent at any time.

Customers and/or users may exercise these rights by submitting a written and signed request to the postal address of the DATA CONTROLLER located at Carrer Pins de Can Caralleu, 4 – 08017 Barcelona (Spain), or via the email address proyectos@adaptatuweb.com. In both cases, the data subject must attach valid proof of identity, such as a copy of their DNI/NIE or an equivalent document, clearly indicating the right they wish to exercise.

Customers and/or users also have the right to lodge a complaint with the competent Supervisory Authority (Spanish Data Protection Agency) if they consider that the processing does not comply with current regulations or that their rights regarding the protection of their personal data have been infringed, especially when they have not obtained satisfaction in the exercise of their rights, through the website https://www.aepd.es.

Attention to Data Subject Rights

These rights will be addressed by the DATA CONTROLLER within a period of 1 month, which may be extended to 2 months if the complexity of the request or the number of requests received so requires. All of this is without prejudice to the obligation to retain certain data under the terms established by law and until any potential liabilities arising from the processing or, where applicable, from a contractual relationship, have expired.

In addition to the above, and in relation to data protection regulations, Users who request it have the possibility to determine the handling of their data after their death.

Sending of Commercial Communications

If the data subject expressly authorises it, their personal data may be used for sending commercial communications related to the products and/or services of the DATA CONTROLLER, through electronic or conventional means.

The legal basis legitimising this processing is the consent of the data subject, which may be withdrawn at any time without affecting the lawfulness of the processing carried out prior to its withdrawal.

The data subject may object at any time to the processing of their data for commercial purposes, as well as revoke the consent given, by submitting a request to the DATA CONTROLLER through the available contact channels.

Data will be retained as long as consent for this purpose remains in force or until the data subject requests its deletion or objects to the processing.

Social Media Policy

The DATA CONTROLLER maintains active profiles on the following social networks for informational, educational, and promotional purposes:

• Instagram:
• LinkedIn:

In these profiles, the DATA CONTROLLER acts as the direct controller of the personal data of users who interact within these digital environments (for example: followers, subscribers, fans, individuals who comment or communicate through these channels).

The use of these profiles is limited to:

• Sharing content related to the activities and objectives of the website and the organisation.
• Publishing relevant news, events, or updates.
• Interacting with users under the terms established by the respective social network.

Personal data obtained through these social platforms will not be used for purposes other than those described, unless the data subject provides explicit consent.

Users should be aware that the information they share through these networks may become publicly visible depending on the privacy settings of each profile, and that such interactions are subject to the terms of use and privacy policies of each platform:

Instagram →

LinkedIn →

Users are encouraged to review these policies before interacting with our profiles, as the processing of their data is also conditioned by the provisions established by these platforms.

Accuracy of the Data Provided by Data Subjects

The customer and/or user is responsible for ensuring that the information provided through the electronic forms made available on the WEBSITE, or through emails sent to the various accounts under the domain adaptatuweb.com, is truthful. They are responsible for the accuracy of all data they communicate and must keep it updated so that it reflects their actual situation. They shall be liable for any false or inaccurate information they provide and for any damages, inconveniences, or issues that such information may cause to the DATA CONTROLLER or to third parties.

IP Addresses

The website’s servers may automatically detect the IP address and domain name used by the user. An IP address is a number automatically assigned to a computer when it connects to the Internet. All this information is recorded in a server activity log that enables the subsequent processing of the data for the sole purpose of obtaining statistical measurements, such as the number of page impressions, the number of visits to the web services, the order of visits, the access point, etc.

Security Measures

The DATA CONTROLLER guarantees that it has implemented on the WEBSITE the appropriate technical and organisational policies to apply the security measures established by EU GDPR 2016/679 and LOPDGDD 3/2018, in order to protect the rights and freedoms of customers and/or users, and has provided them with the necessary information to enable them to exercise those rights.

To protect individual rights—especially in relation to automated processing—and with the aim of ensuring transparency for customers and/or users, the DATA CONTROLLER has established a policy that sets out all such processing activities, the purposes pursued, the legal basis for each, and the mechanisms available to customers and/or users to exercise their rights.

The WEBSITE is developed using the latest version of the WordPress content management system, with the Divi visual builder. It has an active SSL certificate for the entire domain, as well as the reCAPTCHA system, which protects against spam, abuse, and automated access, ensuring that forms are used only by natural persons.

Secure transmission of personal data through the enabled electronic forms is ensured, and additional security measures are in place both at the server level and within the hosting service itself.

The WEBSITE is hosted on servers provided by IONOS Cloud S.L.U., with Tax ID B85049435 and registered address at C/ Madre de Dios, 21, 26004 Logroño (Spain). The assigned IP address belongs to a European range.

All information will be stored and managed with due confidentiality, applying the necessary IT security measures to prevent unauthorised access or misuse of your data, as well as its manipulation, deterioration, or loss.

However, customers and/or users should be aware that the security of IT systems is never absolute. When personal data is provided over the Internet, such information may be collected without consent and processed by unauthorised third parties.

The DATA CONTROLLER declines any responsibility for the consequences that such actions may have for the user if the information was published voluntarily.

The DATA CONTROLLER undertakes to ensure compliance at all times with the applicable regulations on personal data protection and, in particular, to implement the appropriate safeguards to protect the rights and freedoms of data subjects.

In the event of a personal data security breach that entails a risk to the rights and freedoms of natural persons, the DATA CONTROLLER undertakes to notify the competent supervisory authority and, where applicable, the affected individuals, in accordance with Articles 33 and 34 of EU GDPR 2016/679.

Acceptance and Consent

The customer and/or user declares that they have been informed of the conditions regarding the protection of personal data, accepting and consenting to the automated processing of such data by the DATA CONTROLLER in the manner and for the purposes indicated in this Privacy Policy. Certain services provided on the WEBSITE may contain specific conditions with particular provisions regarding the protection of personal data.

Changes to This Privacy Policy

The DATA CONTROLLER reserves the right to modify this Privacy Policy in order to adapt it to legislative, jurisprudential, or interpretative developments of the Spanish Data Protection Agency, as well as to industry practices.

In such cases, the DATA CONTROLLER will announce the changes introduced on the websites with reasonable notice prior to their implementation.

This Privacy Policy is complemented by the Legal Notice, the Cookies Policy, and the Terms and Conditions that may be established for certain services, where access to such services entails specific provisions regarding the protection of personal data.