Privacy policy

Here we explain what we do with the personal data you give us on milimetricwebs.com. We follow the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

Who the data controller is

• Controller: Milimetric Marketing, S.L. MilimetricWebs is one of its services.
• Tax ID (NIF): B66803206
• Registered office: Carrer Major, 1, 08394 Sant Vicenç de Montalt (Barcelona), Spain
• Email: info@milimetricmkt.com
• Telephone: +34 937 911 828

What data we process and why

When you ask for a proposal or contact us

This may be through the contact form, by email or by phone.

• Data: your name, business, email address, telephone number, sector, current website or Google Business Profile, the plan you’re interested in, when you’d like to have the website, whether you have the materials, and your message. We also store the page you write to us from, your browser and, if you came to the website from an ad or a campaign, where you came from (for example, utm_source or gclid).
• Purpose: to reply to you, prepare your proposal and, if you sign up, start the project.
• Legal basis: your request. These are pre-contractual measures taken at your request (Article 6(1)(b) GDPR).
• How long: if you don’t end up signing up, we delete it after 12 months. If you do, we keep it for as long as the service lasts and, after that, for as long as the law requires.

To protect the form

• What we do: the form uses Cloudflare Turnstile, which checks that whoever submits it is a person and not a bot. We also limit the number of submissions per IP address. We don’t store the IP address, only a one-way hash of it, from which the address cannot be recovered.
• Legal basis: our legitimate interest in protecting the website and preventing spam (Article 6(1)(f) GDPR).
• How long: the hash is stored with the request and deleted along with it.

If you’re a client of the service

We process your data to provide the service, invoice it and collect payment. The legal basis is the contract and our legal obligations (Articles 6(1)(b) and 6(1)(c) GDPR). The details are in the contract.

We process the data of the enquiries your website receives on your behalf, as data processors. This is governed by the data processing agreement (encàrrec del tractament) in the contract.

Marketing communications

We’ll only send you marketing information if you give us your express consent. You can withdraw it at any time.

When you browse the website

This website doesn’t use cookies, or any analytics or advertising tools. We explain this in the cookie policy.

The server keeps technical logs of visits (IP address, date, page and browser) for security and to fix errors. We delete them periodically. The legal basis is our legitimate interest in keeping the website secure (Article 6(1)(f) GDPR).

Who we share your data with

We don’t sell or transfer your data. Only the providers that help us provide the service have access to it. They do so on our behalf, as data processors, under a contract that requires them to protect it:

• Hosting: the provider of the server where the website and the form are hosted.
• Email: Brevo SAS (France), which sends the form notifications, and the provider of our mailboxes.
• Website security and delivery: Cloudflare, Inc. (United States). Visits go through its network, which protects the website and makes it faster, and the form uses its Turnstile service. See its privacy policy and the Turnstile privacy policy.

We’ll also disclose it to public authorities and the courts when the law requires us to.

International transfers

Cloudflare, Inc. is in the United States. It participates in the EU-US Data Privacy Framework, which the European Commission considers an adequate safeguard. If that participation ceased to be valid, Cloudflare applies the European Commission’s standard contractual clauses.

Your rights

At any time, you can exercise your right to:

• access your data;
• rectify it if it isn’t correct;
• erase it;
• object to its processing or restrict it;
• portability: receive it in a format you can use elsewhere;
• withdraw the consent you have given us.

Email info@milimetricmkt.com and tell us in the subject line which right you want to exercise. We’ll reply within one month at most.

If you think we haven’t handled your data properly, you can file a complaint with the Spanish Data Protection Agency (AEPD).

Security

We apply the technical and organisational measures needed to protect your data: an encrypted connection (HTTPS), access restricted to the team members who need it, and backups. The AI tools we use have no access to personal data.

Changes to this policy

If we change it, we’ll publish it here with the new date.