Privacy policy
Last updated: 8 October 2026
This English version is provided for convenience. In the event of any discrepancy, the Catalan version shall prevail.
At Sm2tek we take the protection of your data seriously. This policy explains what data we process, why, and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the protection of personal data and the guarantee of digital rights (LOPDGDD).
1. Data controller
| Owner | SM2TEK, S.L. (to be confirmed) |
|---|---|
| Trade name | Sm2tek |
| Tax ID (NIF) | NIF pending |
| Registered office | Registered office pending |
| Registration details | Commercial Registry of [province], volume [ ], folio [ ], sheet [ ], entry [ ] |
| sm2tek.sl@gmail.com | |
| Activity | Design and development of websites and digital software. |
2. What data we process
We only process the data you provide when you contact us:
- Contact form: name, company or business (optional), type of project and your message. The form does not store any data on the website: when you press the button, the message opens in your WhatsApp or email app so that you decide whether to send it.
- WhatsApp: your phone number, profile name and the content of the conversation.
- Email: your email address and the content of your message.
- Website visits: the hosting server (Hostinger) automatically logs technical data such as your IP address, date and time, and browser. The website does not use analytics cookies.
- Clients: if you hire our services, also the data needed to provide and invoice them (tax and contact details).
We do not ask for special categories of data. Please do not send us sensitive information that is not needed for your project.
3. Why we use it and on what legal basis
| Answering enquiries and quote requests | Your consent, given when you contact us (Art. 6(1)(a) GDPR), and taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR). |
|---|---|
| Providing the contracted services and managing the business relationship | Performance of a contract (Art. 6(1)(b) GDPR). |
| Invoicing and accounting and tax obligations | Compliance with legal obligations (Art. 6(1)(c) GDPR). |
| Website security and operation (server logs) | Our legitimate interest in keeping the website secure and available (Art. 6(1)(f) GDPR). |
We do not use your data to send you advertising or to build profiles, and we do not make automated decisions.
4. How long we keep it
- Enquiries that do not lead to a contract: as long as needed to answer them and, at most, one year.
- Server technical logs: the limited period set by Hostinger for the security of the service.
- Clients: for the duration of the business relationship and, afterwards, for the legal retention periods (up to 6 years under commercial law and 4 years under tax law).
After these periods, the data is deleted or blocked as required by law.
5. Who we share it with
We do not sell or transfer your data to third parties, except where required by law (for example, to the Spanish Tax Agency). To operate, we use providers that process data on our behalf or as controllers of their own services:
- WhatsApp (Meta Platforms), if you message us on WhatsApp.
- Gmail (Google), our email service.
- Hostinger (Hostinger International Ltd., Cyprus, European Union), the website's hosting provider. Like any server, it logs technical data for each visit (IP address, date and time, requested page and browser) to run the website and protect it from attacks. We process this data on the basis of our legitimate interest in website security (Art. 6(1)(f) GDPR), and Hostinger keeps it for the limited period set out in its privacy policy.
Hostinger is an EU company. Some of the other providers may process data outside the European Economic Area, in particular in the United States. In those cases, transfers are covered by the EU-US Data Privacy Framework or by the standard contractual clauses approved by the European Commission.
6. Your rights
You may exercise the following rights at any time:
- Access: find out what data of yours we process.
- Rectification: correct inaccurate data.
- Erasure: ask us to delete it.
- Objection and restriction: object to processing or ask us to restrict it.
- Portability: receive your data in a structured format.
- Withdraw your consent at any time, without affecting processing carried out before.
To exercise them, email us at sm2tek.sl@gmail.com stating which right you wish to exercise. If necessary, we may ask you to prove your identity. We will reply within one month.
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Minors
Our services are aimed at businesses and professionals. If you are under 14, please do not give us personal data without the consent of your parents or guardians.
8. Security
We apply appropriate technical and organisational measures to protect your data against loss, unauthorised access or alteration, taking into account the state of the art and the risks of the processing.
9. Changes to this policy
We may update this policy to reflect legal or service changes. The current version will always be published on this page, with the date of the last update.