Політика конфіденційності

1. Data controller

The data controller for this website is:

• ESADEX®
• Street Castilla La Mancha 2, Fuengirola, Málaga, Spain
• VAT: ES02386573R
• Email: esa@esadex.com

We have not appointed a Data Protection Officer because we are not legally required to. For privacy questions, use the email above.

2. What we collect and why

We collect personal data when you submit our contact form. The form collects:

• Your name
• Company (optional)
• Work email
• Project type and budget range
• The message you write us

We use these details to answer your enquiry and, where relevant, to define a potential project. We do not use it for marketing, we do not add you to any list, and we do not share it with third parties for commercial purposes.

3. Legal basis (Art. 6 GDPR)

• Consent: when you submit the contact form, you explicitly consent to us processing the data you provide in order to reply.
• Legitimate interest: to protect the security of our systems and prevent abuse of our forms.

4. Retention

We keep contact-form submissions only as long as we need them to handle your enquiry, up to a maximum of 24 months. If the conversation leads to a commercial engagement, we move the data to our client records and keep it under the applicable accounting and contractual obligations (typically 6 years for Spanish tax law).

5. Recipients and transfers

We keep your data on EU-hosted infrastructure. The only third parties that may process your data on our behalf are:

• Google
• GoDaddy

These providers act as processors under a DPA with the same security obligations. We do not transfer personal data outside the EU / EEA.

6. Your rights

You can request access, correction, deletion, restriction or portability of your personal data, or object to its processing, under the GDPR. To exercise your rights, write to esa@esadex.com . We will respond within 30 days.

If you believe your rights have been violated, you can file a complaint with the Spanish Data Protection Agency (AEPD).

7. Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit (TLS), access control, least-privilege access to stored data, and regular review of our supplier list.

8. Changes to this policy

We may update this policy to reflect changes in our practices or legal obligations. The "Last updated" date at the top always reflects the current version.

9. Contact

Questions about this policy or about how we handle your data? Email esa@esadex.com.