PRIVACY POLICY

• Controller: [OWNER]
• Tax ID: [TAX ID]
• Registered address: [ADDRESS]
• Contact email: info@renderwave.es
• Phone: [PHONE]

Only the data the data subject voluntarily provides through the site's contact form is processed:

• Name (required).
• Company (optional).
• Email (required).
• Phone (optional).
• Project description: the free-text content the data subject chooses to include.

Technical connection data automatically generated by the hosting infrastructure (for example, IP address and access logs) may also be processed for security and service-operation purposes.

No data is collected from third-party sources, nor any special categories of data. Please do not include sensitive information in the form's free-text field.

• To handle received requests for information and respond to enquiries raised.
• To prepare and send quotes or service proposals and maintain pre-contractual communication regarding that project.
• To manage the contractual relationship and any resulting administrative, accounting and tax obligations, where applicable.
• To ensure the security, availability and integrity of the website and prevent misuse.
• To send commercial communications, only if the data subject separately and voluntarily ticks the corresponding box.

• Handling enquiries: consent of the data subject, Article 6.1.a) GDPR, given upon submitting the form and accepting this policy.
• Preparing proposals and pre-contractual management: application of pre-contractual measures and, where applicable, performance of the contract, Article 6.1.b) GDPR.
• Administrative, accounting and tax obligations: compliance with a legal obligation, Article 6.1.c) GDPR.
• Site security and fraud prevention: legitimate interest of the controller, Article 6.1.f) GDPR.
• Commercial communications: specific and independent consent, Article 6.1.a) GDPR, revocable at any time.

• Enquiries not resulting in a contractual relationship: until the request has been resolved and, thereafter, for the period necessary to address any potential liabilities.
• Client data: for the duration of the relationship and, afterwards, for the periods legally required for commercial, accounting and tax purposes.
• Data processed with consent: until it is revoked or is no longer necessary for the purpose stated.
• Technical security logs: for the period defined by Dinahosting.

Data is not shared with third parties except where legally required. The technology providers strictly necessary to provide the service may access the data, acting as processors under the corresponding contract pursuant to Article 28 GDPR:

• Website hosting and infrastructure: Dinahosting.
• Email service: Dinahosting.

No profiling or automated decision-making with legal effects on the data subject is carried out.

No international transfers of data take place outside the European Economic Area unless the providers listed in the previous section involve them. In such case, this policy will expressly state so, identifying the provider and the appropriate safeguard applied under Chapter V of the GDPR, such as standard contractual clauses or an adequacy decision of the European Commission.

The data subject may exercise the following rights at any time by writing to info@renderwave.es, stating the right being exercised and proving their identity:

• Access to their personal data.
• Rectification of inaccurate or incomplete data.
• Erasure of data when no longer necessary.
• Restriction of processing in the cases provided for.
• Objection to processing based on legitimate interest.
• Portability of the data provided.
• Withdrawal of consent given, without affecting the lawfulness of prior processing.

If the data subject believes the processing does not comply with applicable regulations, they may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), C/ Jorge Juan 6, 28001 Madrid, or via www.aepd.es.

Appropriate technical and organisational measures are applied to ensure a level of security appropriate to the risk, in accordance with Article 32 GDPR, including encryption of communications via HTTPS, access control to information and limiting processing to data that is strictly necessary.

This policy may be updated to reflect regulatory, technical or organisational changes. The version in force will always be the one published on this page. You may also consult the legal notice and the cookies policy.