Privacy policy
Last updated · 2026-04-23
1. Data controller
Controller: [REGISTERED NAME]
(hereinafter, "Plantekia").
Tax ID: [TAX ID]
Registered address: [FULL REGISTERED ADDRESS]
Contact email: privacidad@plantekia.com
Data Protection Officer (DPO): [DPO NAME / not appointed]
2. Data we process
Plantekia processes the personal data you voluntarily provide in the following contexts:
- Contact form / direct email: name, email, company, message.
- Booking a call (Calendly or another tool): name, email, time preference, message.
- Browsing the site: technical data (IP, user agent, pages visited) collected by analytics. See the cookie policy.
We do not collect special categories of data (health, political views, etc.).
3. Purpose and legal basis
| Purpose | Legal basis (GDPR) | Retention period |
|---|---|---|
| Responding to commercial enquiries | Consent / legitimate interest | 3 years from last contact |
| Contract management with clients | Performance of a contract | For the duration of the relationship + statutory periods (Spanish Commercial and tax law) |
| Website usage analytics (aggregated) | User consent | 14 months (GA4 standard) |
| Compliance with legal obligations | Legal obligation | As required by applicable law |
4. Recipients and processors
Plantekia does not disclose data to third parties except where legally required. We do work with processors that handle data on our behalf:
- Vercel Inc., hosting (USA, with a signed DPA and EU standard contractual clauses).
- Google LLC, Analytics 4 where activated with your consent (USA, Data Privacy Framework).
- Anthropic / OpenAI, AI model providers, only on client projects under a specific contract. They never process personal data of visitors to this website.
- Calendly, call scheduling (USA, EU standard contractual clauses).
- Google Workspace / Resend, business email and notifications.
5. International transfers
Some processors are located outside the EEA (USA). Transfers are made under the European Commission’s standard contractual clauses or under adherence to the EU–US Data Privacy Framework. You can request a copy of these safeguards by writing to privacidad@plantekia.com.
6. Your rights
You have the right to:
- Access your data.
- Rectify it if it is inaccurate.
- Erase it (right to be forgotten).
- Object to the processing.
- Restrict the processing.
- Request portability to another provider.
- Withdraw your consent at any time.
- Lodge a complaint with the Spanish Data Protection Agency (AEPD).
To exercise any right, write to privacidad@plantekia.com providing proof of identity. We will respond within a maximum of 30 days.
7. Security
We apply technical and organisational measures to protect your data against unauthorised access: encryption in transit (HTTPS), environment segmentation, encrypted backups, role-based access control, audit logging and periodic review of suppliers.
8. Changes to this policy
We may update this policy to reflect legal or operational changes. The date of the last update always appears in the header. If the changes are substantial we will notify you by email where we have an active contractual relationship.