Privacy policy
Last update: 25 October 2026.
1. Data controller
- Identity: Impulso Tecnológico S.L.
- Tax ID (CIF): ES-B82696105
- Postal address: Calle Delmira Agustini 5, local 4, 28021 Madrid – Spain
- Phone: +34 91 505 7575
- Privacy contact: dpo@impulsotecnologico.com
2. Purposes of processing
The personal data you provide will be processed for the following purposes:
- Handle contact and quote requests. Manage enquiries sent through the web form or by email and, reply by email or phone and, if applicable, prepare the commercial proposal. When enabled, a virtual or automated assistant may help qualify the enquiry before human review.
- Origin of the enquiry. Together with the enquiry you send through the form we record the page you send it from, the first page you visited in that session, the last service or content page, the contact button you clicked and, if present, UTM campaign parameters, so we know which content originated it. These are paths on our own site, without other parameters or identifiers; see the cookie policy.
- Contract management. If you become a client, process your data to deliver the contracted service: billing, support, operational communications.
- Marketing communications (with consent only). Keep you informed about news, events, guides and services from Impulso Tecnológico. You may oppose this use at any time.
- Web analytics (with consent). Measure navigation and conversions using Google Analytics 4. No analytics cookies are stored without consent; see the cookie policy.
- Contact form security. Protect the form against spam and automated abuse using Cloudflare Turnstile, which loads on the contact page and receives your IP address and technical browser data to check that the submission comes from a person.
- Compliance with legal obligations. Retain tax, accounting and labour documentation for the legally established periods.
3. Legal basis for processing
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Handling contact requests | Consent (6.1.a) / Legitimate interest |
| Origin of the enquiry (pages, button and campaign) | Legitimate interest in knowing which pages and campaigns generate enquiries (6.1.f) |
| Contract performance | Necessary for contract performance (6.1.b) |
| Marketing communications | Explicit consent (6.1.a) |
| Web analytics | Consent (6.1.a) |
| Contact form security (anti-spam) | Legitimate interest in protecting the site and the form against abuse (6.1.f) |
| Legal obligations (tax, labour) | Compliance with legal obligation (6.1.c) |
4. Retention period
- Requests that don't result in a contract: while needed to respond and provide the requested follow-up; afterwards data is restricted where required to address legal claims.
- Contractual relationship: for its duration and afterwards for applicable statutory retention and limitation periods.
- Marketing data: until you withdraw your consent.
5. Recipients and data transfers
Your data will not be transferred to third parties except where required by law. It will be shared with the following data processors, who act on our behalf under contract and with guarantees equivalent to ours:
- Hosting, email, CRM/Odoo, communication and support providers.
- Google Analytics, only for consented analytics.
- Cloudflare, Inc. (Turnstile), to verify that the contact form is submitted by a person; it receives your IP address and technical browser data when it loads, as you start filling in the contact form or as the form nears the screen.
Some providers may process data outside the EEA. Where this occurs, a valid adequacy decision —such as the EU-U.S. Data Privacy Framework— or appropriate safeguards such as the European Commission Standard Contractual Clauses will apply.
6. Automated decisions and profiling
Impulso Tecnológico S.L. does not make automated decisions based solely on personal-data processing that produce legal effects or significantly affect the data subject. Using a virtual assistant to organise or qualify a contact request does not create a binding automated decision and does not replace human review where needed.
7. Your rights
You have the right to:
- Access — know what data we hold about you.
- Rectification — correct inaccurate data.
- Erasure ("right to be forgotten") — request deletion of your data.
- Object — to the processing of your data for a specific purpose.
- Restrict processing.
- Portability — receive your data in a structured format.
- Withdraw consent previously given.
- Lodge a complaint with the AEPD — Spanish Data Protection Agency (aepd.es), the competent supervisory authority.
To exercise these rights, get in touch with us specifying the right you want to exercise. We will only request additional information to verify your identity where reasonable doubts exist, and will respond within the applicable statutory period.
8. Security measures
We apply appropriate technical and organisational measures to maintain a security level appropriate to the risk, including access controls, protection of communications, continuity measures and review of systems where necessary.
9. Changes to this policy
Impulso Tecnológico S.L. may modify this policy at any time to reflect regulatory or service changes. Any modification will be notified through the website itself, with the date of update in the document header.
Autogram users can consult the separate Autogram privacy policy.