Privacy policy
Information on the processing of personal data under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on data protection and the guarantee of digital rights (LOPDGDD).
1. Data controller
- Controller
- CEDESA DIGITAL, S.L. (Metrosafe brand)
- Tax ID (NIF)
- B06684369
- Address
- Campus Universitario, Avda. de la Investigación S/N, Edificio PCTEX, Oficina 2.1, 06006 Badajoz, Spain
- Contact email
- [email protected]
- Privacy and rights email
- [email protected]
2. What data we process and why
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Contact and demo request forms | Name, organisation, role, email, phone and the content of the message | Handling and answering the enquiry and, where applicable, preparing a commercial proposal | Consent of the data subject (art. 6.1.a GDPR) and pre-contractual steps at the data subject’s request (art. 6.1.b GDPR) | Up to 2 years from the last contact, unless a contractual relationship is entered into or erasure is requested earlier |
| Site usage analytics | Browser identifier, pages visited, referral source, device and interaction data, with anonymised IP | Understanding how the site is used in order to improve its content | Consent of the data subject (art. 6.1.a GDPR), given through the cookie banner | As per each tool’s retention period; see the Cookie policy |
| Server technical logs | IP address, user agent, timestamp and requested resource | Ensuring site security and diagnosing incidents | Legitimate interest of the controller in the security of its systems (art. 6.1.f GDPR) | Maximum 12 months |
No automated decision-making or profiling with legal effects on data subjects is carried out on the basis of data collected through this site.
3. Recipients and processors
No data is disclosed to third parties except where legally required. The following providers do act as processors, under the contract required by article 28 GDPR:
| Provider | Service | Location | Transfer safeguard |
|---|---|---|---|
| Cloudflare, Inc. | Site hosting and content delivery network | USA / global | European Commission standard contractual clauses |
| FormSubmit | Contact form receipt and delivery to the controller’s mailbox | USA | European Commission standard contractual clauses |
| Google LLC | Google Analytics 4 and Google Tag Manager | USA | Standard contractual clauses and EU-US Data Privacy Framework |
| Microsoft Corporation | Microsoft Clarity | USA | Standard contractual clauses and EU-US Data Privacy Framework |
The analytics tools (Google and Microsoft) are only activated if you accept analytics cookies in the banner. If you reject them, they are not loaded and no transfer to those providers takes place.
The site’s typefaces are self-hosted on our own domain. We use no Google Fonts and no other external font service, so if you reject analytics cookies your browser makes not a single request to any third-party domain.
4. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, as well as withdraw any consent given, without affecting the lawfulness of processing carried out beforehand.
- How: by writing to [email protected] or to the postal address in section 1, identifying yourself and stating which right you are exercising.
- Response time: one month from receipt of the request, extendable by a further two months where complexity justifies it, in which case you will be informed.
- Complaints: if you consider that processing does not comply with the applicable rules, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es).
5. Security and minors
The controller applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including traffic encryption, access control and operation logging.
This site is aimed at professionals and organisations. It is not intended for minors and no data relating to minors is knowingly collected.
6. Changes to this policy
This policy may be updated to reflect regulatory changes or changes in processing activities. The date of last revision appears at the foot of the page.
Last reviewed: