Legal information
What data of yours we process, what for, for how long and what you can demand from us. No copy-and-paste clauses: this is exactly what we do.
We do not process special categories of data (health, political opinions, trade union membership, ethnic origin, biometric data or sexual orientation) and we ask you not to provide them to us through the form. We do not take automated decisions with legal effects and we do not build commercial profiles about you.
We do not sell or transfer your data to third parties for commercial purposes.
| Processing | Legal basis |
|---|---|
| Answering your enquiry and preparing the quotation | Pre-contractual measures at your request (art. 6.1.b GDPR) |
| Provision and invoicing of the services contracted | Performance of the contract (art. 6.1.b GDPR) |
| Tax, accounting and commercial obligations | Compliance with a legal obligation (art. 6.1.c GDPR) |
| Operational notices about your services | Performance of the contract (art. 6.1.b GDPR) |
| Commercial communications to clients about similar services | Legitimate interest and art. 21.2 LSSI, with the right to object in every message |
| Commercial communications to non-clients | Your consent (art. 6.1.a GDPR) |
| Analytics and advertising cookies | Your consent (art. 6.1.a GDPR) |
| Systems security and fraud prevention | Legitimate interest (art. 6.1.f GDPR) |
Where processing is based on your consent, you may withdraw it at any time without this affecting the lawfulness of processing carried out beforehand. Where it is based on our legitimate interest, we have carried out the corresponding balancing test and you may ask us for a copy.
We do not transfer your data to third parties except where legally obliged to do so. We do, however, use providers who access it in order to provide us with a service and who act as processors:
We will also disclose your data to public authorities and courts where there is a legal obligation or a valid request.
Our hosting and our email are located in the European Union. Some of the providers listed belong to corporate groups that may process data outside the European Economic Area. Where that happens, the transfer relies on an adequacy decision of the European Commission or on the Standard Contractual Clauses approved by the Commission, together with any supplementary measures that may be necessary.
You may exercise the following rights free of charge:
Write to info@solucionec.com stating the right you wish to exercise. We will reply within one month. If you believe we have not dealt with your request properly, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan, 6. 28001 Madrid) or with the supervisory authority of your country of residence.
We apply technical and organisational measures proportionate to the risk: traffic encryption via TLS, verified backups, role-based access control, two-factor authentication on critical accounts, a password manager for client credentials and regular software updates.
Should a security breach occur that poses a risk to your rights, we will notify the Spanish Data Protection Agency within 72 hours and will inform you directly where the risk is high.
When we develop or maintain a client's website, application or systems, we access personal data of their users, customers or employees. In that case the data controller is our client and we act as the processor, in accordance with article 28 GDPR.
In practice, this means that:
If you are a user or customer of a company whose website we maintain and you wish to exercise your rights, you must address that company, which is the controller. If you write to us, we will pass your request on without delay and confirm that we have done so.
We maintain profiles on social media and professional platforms. If you interact with them, the social network processes your data in accordance with its own policies, over which we have no control, and we only access the information the platform makes available to us. Following us, commenting or sending us a message does not add you to any commercial communications list of ours.
Our services are aimed at companies, professionals and organisations. They are not intended for minors and we do not knowingly collect their data. If we detect that we have received data relating to a minor without the authorisation of their legal guardian, we will delete it.
We may update this Privacy Policy to adapt it to legal or technical changes or to changes in the way we provide our services. We will publish the version in force at this same address, stating the date of the last amendment and, where the change is substantial, we will inform our clients through the contact details we hold.
Last updated: 11 September 2026.
You can download or print this page at any time; the version in force is always the one published here.
This is an English translation provided for convenience. In the event of any discrepancy, the Spanish version published at solucionec.com/politica-de-privacidad/ shall prevail.
