Privacy policy
Last updated: November 2026
We comply with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018. This policy explains how we process the data you provide through this website.
1. Data controller
| Controller | ARESTES SERVEIS INFORMATICS · Tax ID B61129227 |
|---|---|
| Address | c/ Sardanya, 333 Entlo 2 08025 Barcelona |
| Privacy contact | arestes@arestes.es |
2. Data we process, purpose and legal basis
| Processing | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form | Name, phone, email and message | To handle your request and contact you to reply | Your consent (Art. 6.1.a GDPR), given by ticking "I agree to be contacted" |
| Audience measurement (only if you accept it in the cookie panel) | Pages visited, actions on the site (button clicks, video playback), origin (referring domain and UTM parameters), language, device type and browser, and a random session identifier that disappears when you close the tab. We use no persistent visitor identifier. We do not store your IP address or your name. | To know how many people visit the site and which content is useful to them, in order to improve it | Your consent (Art. 6.1.a GDPR), which you can withdraw under "Cookie settings" |
| Server technical logs | IP address, date and time, pages requested | Security and proper operation of the site | Legitimate interest (Art. 6.1.f GDPR) |
The fields marked in the form are required to be able to reply; without them the form cannot be sent. You must be over 14 years old.
3. How the form is processed
This website does not store the form data in any database or file: it is sent by email to the controller and is not kept on the web server. The message received is kept in the controller's mailbox.
4. How audience measurement is processed
If you do not accept measurement, no visit data is sent. If you accept, events are sent to our own service (no third-party tools) and stored in a database on the controller's servers. Individual events are kept for 13 months; afterwards only aggregated, anonymous figures (visits per day and page) are kept. You can withdraw your consent at any time from "Cookie settings", and the session identifier is deleted from your browser.
5. Retention period
We will keep your form message for 72 horas from the last communication, or as long as necessary to handle your request and, where applicable, for the applicable legal periods. It will then be deleted. Technical logs are kept for the minimum time needed for service security.
6. Recipients
We do not disclose your data to third parties unless legally required. Providers acting as processors are involved in delivering the service, namely the hosting and email provider, under the contract required by Art. 28 GDPR. No international transfers outside the European Economic Area are planned; if that changes, it will be stated here. [COMPLETAR: verificar con el proveedor de hosting y correo]
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time (without affecting the lawfulness of prior processing), by writing to arestes@arestes.es and stating the right you are exercising. We may ask you to prove your identity.
If you believe your rights have not been addressed, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
We apply appropriate technical and organisational measures: HTTPS-encrypted communications, validation of received data, submission limits to prevent abuse, database accounts with minimal permissions and no storage of form data on the website.
9. Cookies
See the Cookie policy.