Privacy policy
Last updated: 1 October 2026
At Innoveza we handle your data with care and only for what you ask us to do. This page explains, in plain words, what data we collect, why, and what your rights are under the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). If there is any difference between this English version and the Spanish one, the Spanish version prevails.
1. Data controller
| Controller | INNOVEZA SL (NIF B93717296) |
|---|---|
| Address | Urb. Señorío de Cortés, 54, 29688 Estepona (Málaga), Spain |
| Contact | [email protected] · +34 658 775 340 |
2. What data we use, why, and on what legal basis
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form | First and last name, email, phone, business, website, services you are interested in, message, language and preferred way to reply | To answer your enquiry and, if you ask, prepare your free review and a quote | Your consent (Art. 6.1.a GDPR) and steps taken at your request before a contract (Art. 6.1.b) |
| WhatsApp, email or phone | Number or email, name and what you write to us | To answer your message | Your consent when you contact us (Art. 6.1.a) and pre-contractual steps (Art. 6.1.b) |
| Clients | Contact and billing details | To deliver and invoice the services you order | Performance of the contract (Art. 6.1.b) and legal tax and accounting obligations (Art. 6.1.c) |
| Visitor statistics | Aggregated, anonymous technical data (page visited, country, device type and referring site), without cookies or personal identifiers | To see which pages are visited, so we can improve the site | Legitimate interest in understanding how our site is used (Art. 6.1.f) |
We do not use your data for automated decisions or for profiling that affects you. We will only send you marketing messages if you give separate consent.
3. How long we keep your data
- Enquiries that do not lead to a project: up to 12 months after our last contact.
- Client data: for as long as we work together, and afterwards for the periods required by law (for example 6 years for business records under the Spanish Commercial Code and 4 years for tax records).
- Visitor statistics: only in aggregated, anonymous form, with nothing that identifies you.
4. Who we share your data with
We never sell or hand over your data to third parties. Only the providers we need to operate can access it, as data processors under a GDPR-compliant contract:
- Google Ireland Ltd. (email and documents in Google Workspace).
- Cloudflare, Inc. (website hosting, security and anonymous visitor statistics).
- Resend (delivers contact form messages to our inbox).
- WhatsApp Ireland Ltd. (only if you choose to message us on WhatsApp).
- Our tax and accounting advisers, for client data.
We may also disclose data to the authorities when the law requires it.
5. International transfers
Some of these providers belong to groups based in the United States. Where data is transferred outside the European Economic Area, the transfer is covered by the EU-US Data Privacy Framework or by the standard contractual clauses approved by the European Commission.
6. Your rights
You can ask us at any time to access, correct or delete your data, to object to or restrict its use, or to receive it in a portable format. Where we rely on your consent, you can withdraw it whenever you like, without affecting what was done before.
To exercise your rights, email [email protected] and tell us which right you want to use. If we have reasonable doubts about your identity, we may ask you to confirm it.
If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
7. Security
We use appropriate technical and organisational measures to protect your data against loss, unauthorised access and misuse.
8. Children
This site is aimed at businesses and professionals. We do not knowingly collect data from children under 14.
9. Changes to this policy
We may update this policy to reflect changes in the law or in our services. The current version, with its date, will always be on this page.