Privacy policy
1. Who is responsible
- Controller
- [TO COMPLETE: full name, or company name]
- Tax ID (NIF / NIE)
- [TO COMPLETE: NIF or NIE tax ID]
- Address
- [TO COMPLETE: address in Spain]
- Contact email
- [TO COMPLETE: email at the final domain]
We work under the trading name Alcavo Solutions. Full owner details are in the legal notice.
2. What data we receive and where from
- Email. If you write to us, we receive your address, your name if you give it, and the content of your message, including any attachments.
- WhatsApp and calls. If you message or call +34 602 63 66 58, we receive your number, your profile name and the content of the conversation.
- Server logs. When you visit the site, the hosting provider automatically records technical data such as your IP address, the date and time, the page requested and your browser.
This site has no forms, no user accounts, no analytics and no advertising. We only process what you choose to send us and the technical logs above.
3. What we use it for and on what legal basis
- Answering your enquiry and preparing a proposal, including the first diagnostic meeting. Basis: your consent when you contact us, and pre-contractual steps taken at your request (GDPR Art. 6(1)(a) and 6(1)(b)).
- Performing the contract, if you go on to hire us for a project. Basis: the contract itself (Art. 6(1)(b)).
- Site security and proper operation, using the server logs. Basis: legitimate interest (Art. 6(1)(f)).
- Meeting legal obligations, such as tax and accounting rules when we invoice (Art. 6(1)(c)).
We make no automated decisions about you and build no profiles. We do not use your data to send advertising you did not ask for.
4. How long we keep it
- Enquiries that do not become a project: up to 12 months after the last message, then deleted.
- Clients: for as long as the relationship lasts and afterwards for the period legal obligations require (for example, six years for accounting and commercial records).
- Server logs: the short period the hosting provider applies.
5. Who we share it with
We do not sell or hand over your data. We use providers who process it on our behalf and only to deliver their service:
- Email provider ([TO COMPLETE: final email provider]).
- WhatsApp (Meta Platforms Ireland Ltd.), for conversations you start on that channel.
- Vercel Inc., which hosts the website.
Some of these providers are based, or have servers, outside the European Economic Area, specifically in the United States. Those transfers rely on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses. We may also disclose data to public authorities where the law requires it.
The development team is spread between Colombia and Spain. It only accesses the data it needs for your project, under a duty of confidentiality.
6. Your rights and how to use them
You can ask us at any time for access to your data, its correction or erasure, restriction of or objection to its processing, and its portability. If you gave us your consent, you can withdraw it whenever you like without affecting what has already been done.
To have your data deleted, just write to [TO COMPLETE: email at the final domain] and ask. We reply within one month at most. If we have doubts about your identity, we will ask you to confirm it. We will delete your emails, your WhatsApp conversations and any files you sent us, except what the law requires us to keep.
If you believe we are not handling your data properly, you can complain to the Spanish Data Protection Agency (aepd.es).
7. Cookies and local storage
This site uses no cookies, neither first-party nor third-party. It only stores your light or dark theme choice in your browser's local storage; that is technical, identifies nobody and never leaves your device. That is why there is no cookie banner. If we later add analytics, advertising or embedded third-party content, we will update this page and ask for your consent before switching them on.
8. Changes to this policy
If we change anything significant, we will update this page and the date above.