Privacy policy

The data controller is Runmake Business SL, whose identifying and contact details appear at the top of this page.

For any matter relating to data protection, users may write to the contact email address provided.

The contact form collects: first name, last name, email address, company and the content of the message. The fields marked as required are those strictly necessary to deal with the enquiry.

The server automatically records technical connection data, such as the IP address and browser type, which are necessary to provide the service and ensure its security.

No special category data is collected, and no automated decision-making or profiling is carried out.

Form data is processed in order to answer the enquiry submitted and, where applicable, to maintain the commercial contact arising from it. The legal basis is the data subject’s consent, given by ticking the acceptance box before submitting.

Technical connection data is processed on the basis of the controller’s legitimate interest in ensuring the security and correct operation of the site.

Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal.

Data is kept for as long as necessary to deal with the enquiry and thereafter for the limitation period of any liabilities arising from the processing.

Where a commercial relationship exists, data will be kept for as long as it continues and, once ended, for the periods required by tax and commercial law.

No data is shared with third parties, except where legally required.

To provide the service we rely on suppliers acting as data processors — website hosting and email delivery — with whom the contracts required by Article 28 GDPR have been signed.

No international data transfers outside the European Economic Area are envisaged. Should any take place, they would be carried out with the appropriate safeguards provided for in the GDPR.

Data subjects may exercise their rights of access, rectification, erasure, objection, restriction of processing and portability, and may withdraw their consent, by writing to the contact address and stating which right they are exercising.

Requests are dealt with within one month of receipt, extendable under the terms set out in the regulations.

If you believe your data is not being processed correctly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

The controller applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including encrypted transmission over HTTPS, access control to systems and regular backups.

Users warrant that the data they provide is true, accurate and up to date, and are liable for any damage arising from its inaccuracy. If they provide third-party data, they undertake to have informed those third parties beforehand of the terms of this policy.