Privacy policy
Last updated: May 25, 2026
This Privacy Policy explains how we collect, use and protect the personal data you provide through pivotando.es, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
1. Data controller
- Controller: Rubén Fos Carmona
- Tax ID (NIF): 21700004X
- Address: Calle San Vicente de Paúl 20, 46019 Valencia, Spain
- Email: info@pivotando.es
- Phone: +34 681 14 29 46
2. Personal data we process
We process the following categories of data depending on how you interact with our website:
a) Contact form
Full name, email, brand (optional), approximate annual revenue and a message describing the project.
b) Newsletter / briefing subscription
Email and explicit consent for the sending of commercial communications.
c) Technical server data
IP address, user agent and access date, recorded in server logs for security and diagnostic purposes. These are not linked to your identity.
3. Purposes and legal basis
Each processing purpose is supported by a specific legal basis:
| Purpose | Legal basis (GDPR) |
|---|---|
| Respond to your contact form request | Consent — art. 6.1.a |
| Send the quarterly briefing you subscribed to | Explicit consent — art. 6.1.a |
| Execute the services agreement | Contract performance — art. 6.1.b |
| Site security and technical logs | Legitimate interest — art. 6.1.f |
| Compliance with tax obligations | Legal obligation — art. 6.1.c |
4. Retention periods
- Contact data without a subsequent contract: up to 12 months, unless earlier deletion is requested.
- Client data: for the duration of the services agreement and afterwards for the legal tax retention period (6 years, art. 30 Spanish Commercial Code).
- Briefing subscribers: until you withdraw your consent.
- Technical server logs: 90 days.
5. Recipients and data processors
We do not share your data with third parties, except with the following data processors with whom we maintain a signed data processing agreement under art. 28 GDPR:
- Hostinger International Ltd. — web hosting (EU-based servers).
- MailerLite Limited — newsletter management and email delivery (Ireland, EU).
- SMTP provider — transactional emails from the contact form.
We may also disclose your data to public authorities when required by law. No international transfers of data outside the European Economic Area take place. Should this occur in the future, we would notify you and apply the safeguards required by GDPR.
6. Your rights
As the data subject, you can exercise the following rights by sending an email to info@pivotando.es, attaching a copy of your ID or equivalent document for identity verification:
- Access to your personal data.
- Rectification of inaccurate or incomplete data.
- Erasure ("right to be forgotten").
- Restriction of processing.
- Objection to processing.
- Portability of your data in a structured, readable format.
- Withdrawal of consent, at any time.
If you believe the processing does not comply with current regulations, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Cookies
The website only uses strictly necessary technical cookies for its operation (session management, language preference). We do not use advertising or third-party analytics cookies that require prior informed consent under Article 22.2 LSSICE.
No third-party server requests: all fonts, stylesheets and scripts are served exclusively from our own domain. We do not load resources from Google Fonts, Google Analytics, Meta Pixel or any other CDN or external service that might transmit your IP address outside the EEA.
8. Security
We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration or destruction: HTTPS encryption, periodic backups, system access controls and ongoing training for personnel with access to data.
9. Minors
This website targets professionals and businesses. We do not request or process information from minors under the age of 14. If we become aware that we have collected data from a minor without express consent of their parents or legal guardians, we will delete such data immediately.
10. Modifications
This policy may be modified to adapt to regulatory or service changes. Changes shall take effect from the moment of their publication on the website. Users are encouraged to review this document periodically.
11. Applicable law
This policy is governed by Regulation (EU) 2016/679 of 27 April 2016 (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and other applicable Spanish regulations on personal data protection.