Skip to content
Data protection

Privacy policy

Last updated: 2026-07-30

This policy describes how Sertoria Tech S.L. processes the personal data it collects through the site sertoria.com, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Act 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).

1. Data controller

  • Owner: Sertoria Tech S.L.
  • Tax ID (NIF): B88855564
  • Address: Calle Ansó, 50 — 50410 Cuarte de Huerva (Zaragoza), Spain
  • Email: info@sertoria.com

2. Data we process

Through the contact form we collect the following data, all of it provided voluntarily by the user:

  • Name.
  • Company (optional).
  • Email address.
  • Telephone (optional).
  • Content of the message.
  • Date and time of submission, together with a record of the consent given and of the version of this policy accepted at that moment.
  • The IP address from which the message is sent, processed transiently as the key of the form's anti-abuse control (see section 4).

3. Purpose of the processing

We use this data exclusively to respond to your contact request, to manage any commercial relationship that may arise from it and, where applicable, to send you quotations or technical information related to your enquiry. We do not use it for advertising purposes, nor do we disclose it to third parties for marketing activities.

4. Legal basis

The legal basis for the processing is the consent of the data subject (article 6(1)(a) GDPR), given expressly by ticking the acceptance box on the form. In order to respond to requests that may involve the performance of a contract or pre-contractual measures, the additional basis is article 6(1)(b) GDPR.

The IP address is processed for a different and narrow purpose: to limit the number of submissions per origin in order to protect the form against abusive and automated use, and to keep the contact channel available. The legal basis is the controller's legitimate interest in the security of its systems (article 6(1)(f) GDPR). It is used solely as the key of a temporary counter; it is not associated with the content of the message nor used to build profiles.

5. Retention period

We retain your data for as long as necessary to respond to your request and, should a commercial relationship begin, for as long as it remains in force and during the mandatory legal periods for compliance with tax, commercial and accounting obligations (as a general rule, six years). If no commercial relationship begins, the data is deleted once the enquiry has been dealt with and, in any event, within a maximum period of twelve months from its receipt. The record of IP addresses used by the anti-abuse control expires automatically after ten minutes.

6. Recipients

We do not disclose your data to third parties except where legally required. We rely on the following processors, under contracts and safeguards compliant with article 28 GDPR:

  • Transactional email provider: Resend, Inc. (United States), which handles the delivery of the internal notice generated by the contact form.
  • Hosting and deployment provider: Vercel, Inc. (United States), which hosts this website and processes the requests sent to it.
  • Usage analytics: Vercel Web Analytics, an aggregated, cookie-free measurement tool from the same provider (see section 7).
  • Corporate email provider: Google Ireland Limited (with Google LLC as a sub-processor in the United States), which provides the mailbox service in which the notice generated by the form is received and stored.

Resend, Inc. and Vercel, Inc. are established in the United States, and Google Ireland Limited relies on Google LLC as a sub-processor in that same country. The processing therefore involves an international transfer of data (article 13(1)(f) GDPR). These transfers rely on the adequacy decision of the EU-U.S. Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795) where the provider concerned is certified under that framework and, in any event, on the standard contractual clauses approved by the European Commission (article 46(2)(c) GDPR), together with additional measures such as encryption of communications. You may request a copy of these safeguards by writing to info@sertoria.com.

7. Browsing data and analytics

To understand the aggregate use of the site we use Vercel Web Analytics, a cookie-freemeasurement tool that does not install identifiers on your device nor allow cross-site tracking. The data it receives (page views, approximate country, device type and browser) is processed in aggregate form and is not associated with identified individuals. The legal basis for this processing is the owner's legitimate interest in knowing how its website is used (article 6(1)(f) GDPR).

Right to object: you may object at any time to this measurement —and to any other processing we base on legitimate interest, including the anti-abuse control described in section 4— by writing to info@sertoria.com. You do not need to give reasons for your decision and we will not ask you for explanations (article 21 GDPR).

8. Your rights

You may exercise the following rights by writing to info@sertoria.com, providing proof of your identity:

  • Access to your data.
  • Rectification of inaccurate data.
  • Erasure of data when it is no longer necessary.
  • Objection to and restriction of the processing.
  • Data portability.
  • Withdrawal of consent at any time.

In addition, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that the processing does not comply with the applicable rules.

9. Security

We apply appropriate technical and organisational measures to ensure a level of security suited to the risk of the processing, including encryption of communications, access control and internal training in data protection.

10. Changes to this policy

We may update this policy to adapt it to regulatory changes or to the evolution of our own services. We will always publish the version in force on this same page, indicating the date it was last updated.

This is an English courtesy translation. The legally binding version is the Spanish one, available at Política de privacidad; in case of any discrepancy, the Spanish version prevails.