Privacy policy

Who is responsible

• Controller: PENDING
• Tax ID: PENDING
• Address: PENDING
• Privacy email: hola@scalia.agency

What data we process

Only what you give us when requesting the free audit or writing to us:

• Name and email.
• Your website address and what you'd like to achieve.
• Any message you choose to add (optional).
• Our communications with you.

We don't ask for sensitive data. Please don't include it in your message.

To make some examples on the site mention your city, we use the approximate city and country that our hosting provider infers from your connection. We don't store your IP address or that city: only your browser remembers it during your visit, and it isn't used to identify you.

Why we use it

• To analyse your business and send you the free audit and, if relevant, a quote.
• To send you a fixed project proposal, if you ask for one.
• To run the project, invoicing and the client relationship if you hire us.

We don't use your data for advertising, we don't sell it and we don't make automated decisions about you.

Legal basis

• Your consent, when you send the form (GDPR art. 6.1.a). You can withdraw it at any time.
• Steps taken at your request before a contract, when preparing a proposal (GDPR art. 6.1.b).
• Performance of the contract and legal obligations, such as tax rules, if you hire us (GDPR art. 6.1.b and 6.1.c).

How long we keep it

We keep your data for as long as needed to handle your request. If you hire us, for the duration of the contract and then for the legal retention and limitation periods. If you don't hire us and ask us to delete it, we delete it.

Who receives it

We don't share your data with third parties unless required by law. We rely on providers who process it on our behalf, under contract and with appropriate safeguards:

• Web hosting provider (Vercel Inc.).
• Transactional email provider (Resend).

Some of these providers may process data outside the European Economic Area. In that case the transfer relies on appropriate safeguards, such as the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.

Your rights

You can request access, correction, deletion, objection, restriction and portability, and withdraw your consent, by writing to hola@scalia.agency and stating which right you're exercising.

If you think we haven't handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es), our lead supervisory authority.

If you're in the UK, the UK GDPR and the Data Protection Act 2018 also protect your data. You can complain to the Information Commissioner's Office (ico.org.uk), although we'd appreciate the chance to sort it out first if you write to us.

Security

We apply reasonable technical and organisational measures to protect your data: encrypted connections (HTTPS), restricted access and providers with security guarantees.