Privacy Policy

Data controller

Aferis Systems, S.L., tax ID B88724927, registered address Calle Serrano, 19, 2.º · 28001 Madrid, España. For any question about your data, email us at administracion@aferis.es.

What data we process

If you write to us through the contact form: your name, your email address, your company name if you give it, the topic you choose and the text of your message. When you send it we also record the date and time, the version of the legal text you accept and the IP address it is sent from. We do not ask for special categories of data (health, beliefs and the like); please do not include them in your message.

If you only browse the site: the server that hosts it logs each request in its technical logs (IP address, date and time, page requested and browser details). We use no analytics, advertising or tracking tools.

What we use it for

Form data, to read your enquiry and reply to you. We do not use it to send you marketing or newsletters.

Your IP address and the server logs, to keep the site secure: detecting abuse, stopping bulk submissions of the form and diagnosing faults. The date, time and version of the accepted text, so that we can prove you gave your consent.

Legal basis

Replying to your enquiry: your consent, given by ticking the box on the form, which is never pre-ticked (Art. 6(1)(a) GDPR).

Site security and abuse prevention: our legitimate interest in protecting the service and the people who use it (Art. 6(1)(f) and Recital 49 GDPR).

Keeping proof of consent: compliance with the legal obligation to be able to demonstrate it (Arts. 6(1)(c) and 7(1) GDPR).

How long we keep it

We keep your message in our mailbox while we deal with your enquiry and, after that, only for as long as liability arising from it may be claimed; then we delete it. You can ask us to delete it sooner at any time.

The IP address we use to limit form submissions is held in memory only and discarded within 20 minutes. The server’s technical logs are deleted automatically within 15 days.

Recipients and processors

We do not sell or share your data with third parties unless the law requires it. To run the service we rely on providers that process it on our behalf, as processors bound by the contract required by Art. 28 GDPR: Resend (Resend, Inc.), which delivers form messages to our mailbox; our email provider, where we receive and keep them; and the hosting provider of the server the site runs on.

International transfers

Resend, Inc. is based in the United States, so sending your message may involve an international transfer of data. That transfer is covered by the standard contractual clauses approved by the European Commission, included in its processing agreement, and, where applicable, by the EU-US Data Privacy Framework (Arts. 45 and 46 GDPR).

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability by emailing administracion@aferis.es and telling us which right you wish to exercise. We will reply within one month of receiving your request, extendable in the cases provided for by law.

Withdrawing consent

You can withdraw your consent at any time by emailing administracion@aferis.es. Withdrawal does not affect the lawfulness of processing carried out before it.

Complaints to the supervisory authority

If you believe we are not processing your data lawfully, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) through its website, www.aepd.es.

Automated decisions

We do not make automated decisions or build profiles with your data.

Cookies

This website sets no cookies and stores nothing in your browser’s storage. The cookie policy explains this in detail.