Privacy policy

1. What data we process and where it comes from

We process no data beyond what you give us, apart from the technical logs any web server produces when it serves a page and the visit notice described below.

We do not ask for or want sensitive data —health, political views, trade union membership, ethnic origin, biometric data— and we do not carry out profiling or automated decisions with legal effects on anyone.

• Contact form: name, company (optional), email address and whatever you write in the message.
• Email, phone or LinkedIn: whatever data appears in the message you send us.
• Server technical logs: IP address, date and time of the request, page requested and browser type. These are produced by the hosting provider and serve to keep the service running and detect abuse.
• Analytics and advertising, only if you accept them: identifiers from the Google Analytics and Google Ads cookies, the pages you visited, your approximate country and, when you arrive from an ad, that click identifier. If you do not accept them, none of this is collected in a way that identifies you. The detail is in the cookie policy.
• Visit notice: when someone arrives at the site, our server sends us a Telegram message with the page, the approximate country and city, the type of device, the language and the site they came from; then a short one for each page they open, and another if they send the contact form, without their name, company or email. To tell people apart from bots, such as the ones that review ads, we check your IP address at that moment and, so the same visit isn't reported over and over, remember a fingerprint of it for 30 minutes. The IP isn't in the message and isn't stored. Nothing is stored in or read from your browser.

2. What we use it for, and on what legal basis

Each purpose rests on a different legal basis, and that matters: which rights you can exercise, and how, depends on the basis.

• Answering your enquiry and, where appropriate, preparing a quote or a proposal. Basis: steps taken at your request prior to entering into a contract (Art. 6.1.b GDPR) and your consent (Arts. 5 and 6 of Law 25.326).
• Staying in commercial contact after that enquiry, while the interest is still alive. Basis: our legitimate interest in developing the relationship (Art. 6.1.f GDPR). You can object at any time and we stop writing to you.
• Keeping the site available and secure. Basis: our legitimate interest in protecting the infrastructure.
• Measure how the site is used and which advertising brings enquiries. Basis: your consent (art. 6.1.a GDPR and art. 22.2 of the Spanish LSSI), which you can withdraw at any time from the "Cookies" link in the footer.
• Know how many people visit the site and which pages they read, in aggregate and without identifying anyone. Basis: our legitimate interest in understanding whether the site does its job (art. 6.1.f GDPR). This measurement uses no cookies and therefore does not depend on your consent; you may object by writing to the privacy address.
• Find out right away when someone visits the site or writes to us, and tell people apart from bots, such as the ones that review ads. Basis: our legitimate interest in attending to whoever is interested in us and in not mistaking automated traffic for real visits (art. 6.1.f GDPR). The IP address is checked only for that, at that moment, and is neither kept nor sent; all that is remembered of the visit is a fingerprint, for 30 minutes, so it isn't reported more than once. It uses no cookies and therefore does not depend on your consent; you may object by writing to the privacy address.
• Complying with the legal, accounting and tax obligations that apply to us. Basis: compliance with a legal obligation (Art. 6.1.c GDPR).

3. How long we keep it

If your enquiry does not lead to a commercial relationship, we keep the message and your contact details for one year from the last communication, and then delete them.

If it does lead to a commercial relationship, we keep them for as long as it lasts and, once it ends, for the limitation periods of any claims arising from the contract and of the accounting and tax obligations applicable in each country.

After those periods, the data is deleted or anonymised so that it can no longer be linked to you.

Visit notices are deleted automatically from the Telegram chat after 24 hours.

4. Who we share it with

We do not sell or rent personal data, and we do not hand the content of your enquiries to anyone for advertising purposes.

There is one third party that does receive data for advertising and measurement, and it is Google, but only if you accepted its cookies: what it receives is the browsing data described in the cookie policy, never your name, your email or the content of your message. Google acts there as an independent controller, under its own policies. If you reject, that transfer does not happen.

We do work with providers who access that data in order to deliver a service to us and who act as processors, under a contract and solely on our instructions: the site's hosting provider, the corporate email provider, and the tools we use to manage incoming enquiries.

Vercel Inc., which hosts the site, also processes technical visit data for the aggregate measurement described in the cookie policy. It receives neither your name, nor your email, nor the content of your message, and it cannot recognise you from one day to the next.

Telegram, the messaging service through which we receive visit notices, receives the data described for that notice, which is deleted from the chat after 24 hours. It receives neither your IP address, nor your name, nor your company, nor your email, nor the content of your message.

We may also disclose data to public authorities, judges or courts where a legal rule requires it.

5. International transfers

We are an Argentine company and some of our providers have servers outside the country you live in. That means your data may be processed outside the European Economic Area, or outside Argentina.

The European Commission recognises Argentina as providing an adequate level of protection, so transfers from the European Union to our head office require no additional safeguards. For any other destination without an adequacy decision, we apply the standard contractual clauses approved by the European Commission (Art. 46 GDPR) and, on the Argentine side, the model contracts approved by the Agency for Access to Public Information.

You can ask us for a copy of those safeguards by writing to the privacy address.

Google, when you accept its cookies, also processes that data in the United States, under the EU-US Data Privacy Framework and the standard contractual clauses.

6. Your rights

You can exercise these rights at any time, free of charge, by writing to the privacy address shown above. We will ask you to prove your identity, so that we don't hand your data to somebody else.

Under the GDPR we reply within one month of your request, extendable by two further months if the request is complex. Under Law 25.326, access is answered within ten calendar days and rectification or deletion within five working days.

• Access: to know what data of yours we hold and what we do with it.
• Rectification and updating: to correct anything wrong or incomplete.
• Erasure: to ask us to delete it once it is no longer necessary.
• Objection: to tell us to stop processing it on the basis of legitimate interest, including any commercial communication.
• Restriction: to ask us to keep it but not use it, while a dispute about it is resolved.
• Portability: to receive the data you gave us in a structured, commonly used format, or to have us send it to another controller.
• To withdraw your consent at any time, without affecting what we did before you withdrew it.

7. Complaints to the supervisory authorities

If you believe we are not handling your data properly, we would appreciate you writing to us first: almost everything gets solved in one email. But you are not required to, and you may complain directly to the authority that covers you.

In Spain, to the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid.

In Argentina, the AGENCY FOR ACCESS TO PUBLIC INFORMATION, in its capacity as the supervisory body of Law No. 25.326, has the power to hear complaints and claims brought by those whose rights are affected by breaches of the personal data protection rules in force.

The data subject has the right to exercise the right of access to their personal data free of charge at intervals of no less than six months, unless a legitimate interest to that effect is established, in accordance with Article 14, subsection 3 of Law No. 25.326.

8. Security

The site is served entirely over HTTPS, so what you type into the form travels encrypted. On our side, access to incoming enquiries is limited to the people who need to answer them.

No system is infallible. Should a security breach occur that poses a risk to your rights, we will notify the supervisory authority within 72 hours of becoming aware of it and, where the risk is high, notify you as well.

9. Minors

This site is aimed at companies and at the people who work in them. It is not intended for minors and we do not knowingly collect their data.

In Spain, anyone under fourteen needs authorisation from whoever holds parental responsibility or guardianship; in Argentina the rules on minors in the Civil and Commercial Code apply. If we find that we have received a minor's data without that authorisation, we delete it.

10. Changes to this policy

If we change how we handle data —a new tool, a different purpose— we update this page and change the date in the header.

Where the change is significant and we have a way to reach you, we will tell you before applying it.