Privacy policy
Last updated: October 2026
This English version is provided for convenience. In case of discrepancy, the Spanish version prevails.
This policy explains how we process your personal data, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).
1. Data controller
| Controller | Datalsia Innovación, S.L. (“Datalsia”) |
|---|---|
| Tax ID (NIF) | B90450891 |
| Address | Av. de Kansas City, 41007 Sevilla (Spain) |
| Contact | · |
2. Summary
This website is static: it has no forms, user accounts or databases. Fonts and icons are served from our own domain. We process the data you choose to send us when you contact us, the essential technical server logs and visit statistics: some without cookies and others, from Google, only if you accept them.
3. What data we process, why and for how long
Enquiries by email, phone or LinkedIn
| Data | Name, company, job title, contact details and the content of your message. |
|---|---|
| Purpose | To answer your enquiry and, if you ask us to, prepare a proposal for services. |
| Legal basis | Your consent when you write to us or call us (Art. 6.1.a GDPR) and, when you request a proposal, the taking of pre-contractual steps at your request (Art. 6.1.b GDPR). |
| Retention | For as long as necessary to handle the enquiry and, at most, one year afterwards, unless it leads to a contractual relationship. |
Clients, suppliers and partners
| Data | Professional contact details of the people through whom we deal with your organisation. |
|---|---|
| Purpose | To manage the contractual relationship and invoicing, and to comply with our legal obligations. |
| Legal basis | Performance of the contract (Art. 6.1.b GDPR), legal obligations (Art. 6.1.c GDPR) and legitimate interest for professional contact details (Art. 19 LOPDGDD). |
| Retention | For as long as the relationship lasts and, afterwards, for the statutory periods; for example, six years for accounting records (Art. 30 of the Spanish Commercial Code). |
Technical server logs
| Data | IP address, date and time, page requested and browser type. |
|---|---|
| Purpose | Site security, abuse prevention and operation of the service. |
| Legal basis | Our legitimate interest in keeping the site secure and available (Art. 6.1.f GDPR). |
| Retention | As long as needed to provide and secure the service, under our hosting provider’s data processing agreement. Datalsia does not access these logs. |
Cookieless visit statistics (Cloudflare Web Analytics)
| Data | Page visited, referring page, country, device and browser type, and load times, in aggregate. It uses no cookies or identifiers. |
|---|---|
| Purpose | To understand which content is of interest and how the website performs, so we can improve it. |
| Legal basis | Our legitimate interest in understanding how the website is used, in aggregate (Art. 6.1.f GDPR). |
| Retention | Aggregate statistics, under Cloudflare’s data processing agreement. |
Google analytics and advertising, only if you accept them
| Data | A pseudonymous identifier stored in a cookie, pages viewed, interactions (for example, clicks on email, phone or LinkedIn, filters and videos), approximate country and city, and device and browser type. If you also accept advertising, aggregate age, gender and interest data that Google obtains from the accounts of people who are signed in and allow it (Google Signals). Google receives your IP address to work out your location but does not store it. |
|---|---|
| Purpose | To measure how many people visit the website, which pages they read and how they contact us, and to understand the aggregate profile of our audience. |
| Legal basis | Your consent for each purpose (Art. 6.1.a GDPR and Art. 22.2 LSSI-CE), which you can withdraw at any time. |
| Retention | Cookies, 2 years at most; user and event data, 14 months in Google Analytics. After that only aggregate statistics remain. |
Your privacy choice
If you accept or reject analytics, advertising or YouTube videos, we store that choice in your browser’s local storage for 24 months. This information does not leave your device and never reaches Datalsia.
You are not obliged to provide us with personal data, but without it we will not be able to respond to your enquiry. We do not make automated decisions or build profiles with your data.
4. Recipients
We do not disclose your data to third parties unless we are legally obliged to (for example, to the tax authorities or to courts and tribunals). We rely on providers that process data on our behalf as processors, under a contract that complies with Article 28 of the GDPR:
- Web hosting and content delivery: Cloudflare, Inc. (Cloudflare Pages).
- Email and office tools: Microsoft Ireland Operations Limited (Microsoft 365).
- Visit measurement: Cloudflare, Inc. (Web Analytics) and, only if you accept it, Google Ireland Limited (Google Analytics).
We also share aggregated, anonymised analytics data with Google to obtain industry benchmarks and predictive metrics.
5. International transfers
If any of these providers processes data outside the European Economic Area, it does so with the safeguards provided for in Chapter V of the GDPR: an adequacy decision, such as the EU-U.S. Data Privacy Framework for participating companies, or the standard contractual clauses approved by the European Commission. Microsoft participates in the EU-U.S. Data Privacy Framework and also applies standard contractual clauses in its data processing agreement. Cloudflare, Inc. participates in the EU-U.S. Data Privacy Framework, and its data processing agreement includes the European Commission’s standard contractual clauses. Google LLC also participates in that framework and applies standard contractual clauses in its data processing terms.
6. YouTube videos and Power BI dashboards
Videos do not load until you give your permission. If you do, your browser connects to YouTube, a service of Google Ireland Limited and Google LLC, which receives your IP address and may use cookies or local storage as an independent controller, in accordance with its privacy policy. Google LLC participates in the EU-U.S. Data Privacy Framework. You can withdraw your permission at any time from , also available at the bottom of every page.
The same applies to the Microsoft Power BI dashboards we publish on some pages: they only load if you press “Cargar el cuadro de mando” (Load the dashboard). At that point Microsoft receives your IP address and may use cookies as an independent controller, in accordance with its privacy statement.
7. Links to social networks and maps
The links to LinkedIn, YouTube and OpenStreetMap are ordinary links: nothing loads until you click them. From that point on, the privacy policy of each service applies.
8. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent you have given us, without affecting the lawfulness of prior processing.
To exercise them, write to us at or at our postal address, stating the right you wish to exercise. We will only ask you for additional information if we have reasonable doubts about your identity. We will reply within one month, which may be extended by a further two months in complex cases (Art. 12.3 GDPR).
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es).
9. Minors
This site is aimed at professionals and businesses. We do not knowingly process data relating to minors under the age of 14 (Art. 7 LOPDGDD).
10. Security
We apply technical and organisational measures appropriate to the risk: an encrypted connection (HTTPS), security headers, a website with no databases or server-side code, which reduces the attack surface, and restricted access to the information you send us.
11. Changes to this policy
We may update this policy to adapt it to changes in the law or in the site itself. The version in force is the one published on this page, with its last updated date.