Privacy policy
Last updated: [DD/MM/AAAA]
1. Data controller
[Razón social], with tax ID (NIF) [B-00000000] and registered address at [Dirección completa, código postal], A Coruña (Spain), is the controller responsible for processing the personal data you provide through this website. You can contact us at hola@atendiva.com[ o, si designas un Delegado de Protección de Datos, en dpo@atendiva.com].
2. Data we process and its purpose
Through the contact form we process the data you voluntarily provide (name, email, phone number, business name, sector, volume of inquiries, and any other information you include) for the following purposes:
- To handle your request for a diagnostic assessment and respond with a proposal where applicable.
- If you check the corresponding box, to send you content and advice by email about appointment acquisition.
We do not process special categories of data through this website. If you engage the service, the scope of the data processed during implementation is detailed in the signed contract or quote, not in this policy.
3. Legal basis
The legal basis for processing your data is your express consent, given by checking the acceptance box on the form, in accordance with article 6.1.a) of Regulation (EU) 2016/679 (GDPR). You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
4. Retention period
We retain contact form data for the duration of the precontractual relationship and, if no contract is ultimately formalized, for a maximum of [12 meses] from the last contact, after which it is deleted or anonymized. If you engage the service, the data is retained for the term of the contract and the applicable legal limitation periods (tax, commercial).
5. Recipients and data processors
We do not transfer your data to third parties except where legally required. To provide the service, we rely on the following data processors, with whom we have entered into the corresponding agreement pursuant to article 28 GDPR:
| Provider | Service | Location |
|---|---|---|
| Vercel Inc. | Website hosting | European Union / United States (under standard contractual clauses) |
| Formspree | Contact form handling | United States (under standard contractual clauses) |
| Cal.com | Booking of the diagnostic call | European Union / United States (under standard contractual clauses) |
| [Proveedor de email/CRM] | Sending replies and communications | [Unión Europea] |
6. International transfers
Where any of our providers is located outside the European Economic Area, the transfer is safeguarded by the standard contractual clauses approved by the European Commission or another appropriate safeguard under Chapter V of the GDPR.
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing, and portability at any time by writing to hola@atendiva.com, enclosing a copy of a document proving your identity. If you believe your request has not been handled correctly, you may file a complaint with the Spanish Data Protection Agency (AEPD, the Spanish Data Protection Authority) at aepd.es.
8. Security measures
We apply appropriate technical and organizational measures to ensure the security of your data and to prevent its alteration, loss, unauthorized processing, or unauthorized access, taking into account the state of the art, the nature of the data, and the risks to which it is exposed.
9. Changes to this policy
We may update this privacy policy to adapt it to legislative developments or changes to our services. The date of the last update appears at the top of this document.