Privacy Policy

1. Data controller

The controller responsible for the processing of personal data through this website is:

Ramón Jaime Arandes Miralles, an independent professional operating under the Smart IT brand.

Contact for privacy and data protection matters:

legal@smartit.es

2. What data we process

We may process the data you voluntarily provide through the contact form, including:

• name
• company
• status as a company or self-employed professional
• the organisation's CIF/NIF/VAT number, when provided
• email address
• telephone number, when provided
• type of service or need
• information included in the message

We may also process certain technical data necessary to manage the form, prevent spam and abuse, and ensure the security and operation of the service, such as temporary information used for rate controls, technical request identifiers, timestamps, and signals or results from anti-spam protection mechanisms.

We do not request special categories of personal data through the form. We recommend that you do not include sensitive information that is not necessary to handle your enquiry.

When you contact us on behalf of a company, Smart IT may supplement the available information about that organisation using business information obtained from legitimate sources when necessary to understand its activity and properly prepare a potential proposal or professional relationship.

3. How we use the data

The data provided may be used to:

• handle and respond to enquiries or requests for information
• understand the need raised and assess how Smart IT may help
• manage professional or commercial opportunities and proposals related to the enquiry
• take the necessary steps before a potential engagement
• manage a subsequent professional or commercial relationship, where applicable
• prevent spam, abuse and fraudulent use of the form and protect the security of the service

Submitting the form does NOT subscribe you to newsletters or periodic marketing communications.

4. Legal basis

The processing of data necessary to respond to an enquiry, prepare a proposal or take requested steps before a potential engagement is based, as applicable, on pre-contractual measures taken at the request of the data subject.

When contact is made on behalf of a company or organisation, certain professional contact data may be processed on the basis of Smart IT's legitimate interest in maintaining and developing professional and commercial relationships with that organisation.

Where a contractual relationship exists, the data necessary to manage it may be processed for the performance of that relationship and compliance with applicable legal obligations.

Processing necessary to prevent spam, abuse and attacks and to protect systems is based on the legitimate interest in maintaining the security and availability of the service.

5. Data retention

Enquiry and opportunity data will be retained for the time necessary to handle the request and subsequently for a general maximum period of 24 months from the last interaction, unless there is a professional or contractual relationship, a legal retention obligation or a circumstance that legitimately justifies a different period.

Technical data used temporarily for security controls and abuse prevention will be retained for the time necessary for those purposes and according to the respective expiry mechanisms.

Data used for web analytics is retained for the periods indicated in Cookies & Analytics.

6. Recipients and service providers

To provide the website services and manage enquiries, data may be processed by providers acting as processors or whose involvement is necessary to provide technology, infrastructure, hosting, electronic communications and email services.

These providers will only access the data to the extent necessary to provide their services and will be subject to the applicable data protection obligations.

Where international transfers of data are necessary, they will be carried out in accordance with the mechanisms and safeguards provided for by applicable law.

7. Web analytics

Smart IT uses its own Matomo installation to understand how the website is used and improve its content and operation.

Analytics is configured to operate without Matomo cookies and without persistent identifiers stored in the browser.

We may measure, among other elements:

• pages visited
• navigation and journeys through the site
• language used
• language changes
• device, browser and operating system
• screen resolution
• source of the visit
• interaction with certain elements and content
• duration and aggregate visit behaviour
• approximate geographical location

Analytics data is used exclusively for audience measurement, website operation and improvement.

It is not used for behavioural advertising, commercial profiling or tracking across different websites.

Analytics visits and actions are not linked to data submitted through the contact form.

To obtain an approximate geographical location, Matomo may temporarily use the IP address and subsequently apply anonymisation techniques.

The IP address is not retained as a complete identifier in analytics data.

Raw visit and action data is retained for 395 days.

Aggregated statistical reports are retained for 25 months.

8. Cookies

The website does not use Matomo cookies to identify or persistently track visitors.

The measurement technologies described above have been configured solely for audience measurement and are not used for advertising or tracking across different websites.

Any cookies or technologies strictly necessary for the operation of certain services, if applicable, will be limited to that purpose.

You can find further information in Cookies & Analytics.

9. Data subjects' rights

You may request access to your personal data, its rectification or erasure, restriction of processing, or object to certain processing activities.

You may also exercise the right to data portability where applicable.

To exercise your rights:

legal@smartit.es

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

10. Security

Smart IT applies reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, misuse or destruction.

11. Changes

This Privacy Policy may be updated when necessary to reflect changes to the website, our processing activities or applicable law.

The version published on this page will be the current version.