Privacy policy

Who is responsible

• Controller: PENDING
• Tax ID: PENDING
• Address: PENDING
• Privacy email: hola@scalia.agency

What data we process

Only what you give us when requesting the free audit or writing to us:

• Name and email.
• Your website address and what you'd like to achieve.
• Any message you choose to add (optional).
• Our communications with you.

We don't ask for sensitive data. Please don't include it in your message.

To make some examples on the site mention your city, we use the approximate city and country that our hosting provider infers from your connection. We don't store your IP address or that city: only your browser remembers it during your visit, and it isn't used to identify you.

Why we use it

• To analyze your business and send you the free audit and, if relevant, a quote.
• To send you a fixed project proposal, if you ask for one.
• To run the project, invoicing and the client relationship if you hire us.

We don't use your data for advertising, we don't sell it and we don't make automated decisions about you.

Legal basis

• Your consent, when you send the form (GDPR art. 6.1.a). You can withdraw it at any time.
• Steps taken at your request before a contract, when preparing a proposal (GDPR art. 6.1.b).
• Performance of the contract and legal obligations, such as tax rules, if you hire us (GDPR art. 6.1.b and 6.1.c).

How long we keep it

We keep your data for as long as needed to handle your request. If you hire us, for the duration of the contract and then for the legal retention and limitation periods. If you don't hire us and ask us to delete it, we delete it.

Who receives it

We don't share your data with third parties unless required by law. We rely on providers who process it on our behalf, under contract and with appropriate safeguards:

• Web hosting provider (Vercel Inc.).
• Transactional email provider (Resend).

Some of these providers may process data outside the European Economic Area. In that case the transfer relies on appropriate safeguards, such as the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.

Your rights

You can request access, correction, deletion, objection, restriction and portability, and withdraw your consent, by writing to hola@scalia.agency and stating which right you're exercising.

If you think we haven't handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es), our lead supervisory authority.

If you live in a U.S. state with its own consumer privacy law (for example California, under the CCPA as amended by the CPRA), you have the right to know what personal information we hold about you, to ask us to correct or delete it and to opt out of its sale or sharing. We don't sell or share personal information for cross-context behavioral advertising. To exercise any of these rights, email us; we'll reply within the time the law sets and won't treat you differently for asking.

Security

We apply reasonable technical and organizational measures to protect your data: encrypted connections (HTTPS), restricted access and providers with security guarantees.