Privacy Policy

1. Data Controller

The data controller responsible for processing your personal data is:

Iberovita
Address: C/ Impresores, 20 · P.E. Prado del Espino · Boadilla del Monte · 28660 · Madrid · Spain
Email: [email protected]
Phone: +34 698 851 323

2. Data We Collect

We only collect personal data that you voluntarily provide through the contact form on this website. This includes:

• First and last name
• Company name (optional)
• Email address
• Message content

We do not collect any sensitive personal data. We do not use tracking cookies or advertising technologies.

3. Purpose and Legal Basis

We process your personal data for the following purposes:

• Responding to your enquiry — legal basis: legitimate interest (GDPR Art. 6(1)(f)) and pre-contractual measures (Art. 6(1)(b)).
• Commercial communications — only where you have initiated contact for commercial purposes; legal basis: legitimate interest.

We will never send unsolicited marketing emails or share your data for advertising purposes.

4. Third-Party Processors

We use the following third-party services that may process your data on our behalf:

• Formspree Inc. — processes contact form submissions. Data is transmitted securely and subject to Formspree's Privacy Policy.
• Google LLC — Google Fonts is loaded from Google servers, which may log your IP address. No personal form data is shared with Google.
• GitHub Inc. — this website is hosted on GitHub Pages. GitHub may process technical access data (IP address, browser type). See GitHub's Privacy Statement.

All third-party processors are located in the European Economic Area or operate under EU-approved data transfer mechanisms.

5. Data Retention

We retain contact enquiry data for as long as necessary to respond to your enquiry and maintain the resulting commercial relationship, or for a maximum of three (3) years from the date of last contact, whichever is shorter.

After this period, data is securely deleted unless a longer retention period is required by law.

6. Your Rights

Under the GDPR and Spanish data protection law, you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your data where there is no legitimate reason to continue processing.
• Right to restriction — request that we limit how we use your data.
• Right to data portability — receive your data in a structured, commonly used format.
• Right to object — object to processing based on legitimate interest.

To exercise any of these rights, contact us at [email protected]. We will respond within one month.

7. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Authority:

Agencia Española de Protección de Datos (AEPD)
Website: www.aepd.es

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated date. We encourage you to review this policy periodically.

9. Contact

For any questions or requests regarding this Privacy Policy or your personal data, please contact us at:
[email protected]