How we handle personal data.

1. Data controller

The controller responsible for personal data processed through this website is MARTECHFY, based in Madrid, Spain. Privacy-related requests can be submitted through our contact form.

2. Data we collect

Through the contact form we collect:

• Email address (required) — to reply to your enquiry.
• Free-text message (required) — the content of your enquiry.
• Optional newsletter consent — recorded separately, only if you explicitly opt in.
• Technical metadata — including IP address, submission timestamp and basic anti-abuse signals used strictly for security and spam prevention.

We do not knowingly collect special categories of personal data and do not process payment data on this website.

3. Purposes of processing

• Responding to enquiries submitted through the contact form.
• Sending occasional MARTECHFY news and updates, only where you have separately opted in.
• Detecting and preventing abuse of the contact form.
• Complying with applicable legal obligations.

4. Lawful bases

• Contact form: steps taken at your request prior to entering into a possible relationship, and our legitimate interest in responding to enquiries directed to us.
• Newsletter: your consent, provided separately from any other action, and revocable at any time.
• Security and abuse prevention: our legitimate interest in protecting the website and its users.

5. Required and optional fields

Providing your email address, message and privacy acknowledgement is required to submit the contact form. The newsletter consent checkbox is optional and unchecked by default. You can submit an enquiry without opting in.

6. Recipients and processors

Enquiries are delivered by email through Resend, acting as an email delivery provider on our instructions. Website infrastructure is hosted through Vercel. We do not sell personal data. Optional analytics does not load unless it is configured and you first grant Analytics consent.

7. International transfers

Where a service provider processes personal data outside Spain or the European Economic Area, we rely on an applicable lawful transfer mechanism, such as an adequacy decision or Standard Contractual Clauses, together with supplementary safeguards where required.

8. Retention

• Contact enquiries: normally retained for up to 12 months after the last relevant communication, unless a longer period is necessary to establish, exercise or defend legal claims or comply with a legal obligation.
• Newsletter consent records: retained while the subscription remains active and for the period reasonably necessary to evidence consent after withdrawal.
• Security and anti-abuse records: retained only for the shortest period reasonably necessary for security, troubleshooting and abuse prevention.

9. Your rights

Subject to applicable data protection law you have the right to access, rectify or erase your personal data, restrict or object to processing, and to data portability where applicable. You have the right to withdraw newsletter consent at any time. To exercise any of these rights, please use our contact form.

You also have the right to lodge a complaint with the competent supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).

10. Security

We apply technical and organisational measures proportionate to the risk, including encrypted transport, access controls, input validation, spam and abuse prevention, and limited retention of technical records.

11. Cookies and analytics

See our Cookie Policy for information on cookies, local storage and consent-controlled analytics used by this website.

12. Updates

We may update this policy from time to time. The “Last updated” date at the top of this page reflects the latest revision.