Política de privacidad

1. Data controller

The data controller for information collected through this website is:

• ESADEX®
• Street Castilla La Mancha 2, Fuengirola, Málaga, Spain
• VAT: ES02386573R
• Email: esa@esadex.com

We have not appointed a Data Protection Officer as we are not legally required to; our privacy contact is reachable at the email above.

2. What we collect and why

This website collects personal data only when you voluntarily submit our contact form. The fields collected are:

• Your name
• Company (optional)
• Work email
• Project type and budget range
• The message you write us

We use this data solely to reply to your enquiry and, where relevant, to scope a potential engagement. We do not use it for marketing, we do not add you to any list, and we do not share it with third parties for commercial purposes.

3. Legal basis (Art. 6 GDPR)

• Consent — when you submit the contact form, you explicitly consent to us processing the data you provide in order to reply.
• Legitimate interest — to protect the security of our systems and prevent abuse of our forms.

4. Retention

Contact-form submissions are kept only for as long as needed to handle your enquiry, and in any case for no longer than 24 months. If the conversation leads to a commercial engagement, the data is migrated to our client records and retained under the applicable accounting and contractual obligations (typically 6 years for Spanish tax law).

5. Recipients and transfers

We keep your data on EU-hosted infrastructure. The only third parties that may process your data on our behalf are:

• Google
• GoDaddy

These act as processors under a DPA and are bound to the same security obligations. We do not transfer personal data outside the EU / EEA.

6. Your rights

Under the GDPR you have the right to access, rectify, delete, restrict or object to the processing of your personal data, and the right to data portability. To exercise any of these rights, write to esa@esadex.com — we will respond within 30 days.

If you believe your rights have been violated, you can file a complaint with the Spanish Data Protection Agency (AEPD).

7. Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit (TLS), access control, least-privilege access to stored data, and regular review of our supplier list.

8. Changes to this policy

We may update this policy to reflect changes in our practices or legal obligations. The "Last updated" date at the top always reflects the current version.

9. Contact

Questions about this policy or about how we handle your data? Email esa@esadex.com.