Privacy policy

Controller: Indaga Tech. The owner’s identification details (name, tax ID and address) are set out in the legal notice.
Data protection contact: hola@indaga.tech

• Contact form: name, email, phone and company (optional), service of interest, how you heard about us (optional) and the message you send us, together with the page of this website from which you reached the form, the date and the version of this policy that you accept.
• Clients and users of the private area: identification and contact details, access credentials (the password is stored encrypted) and the information needed to provide the contracted services.
• Technical data: the IP address is used temporarily, without being stored, to limit abusive form submissions and login attempts. The hosting provider may log connection data for security reasons.
• Cookies: see the cookie policy. We only use non-technical cookies if you accept them.

• To handle your contact request and, if you ask for one, to prepare a proposal. Legal basis: your consent (Art. 6(1)(a) GDPR) and the application of pre-contractual measures at your request (Art. 6(1)(b)).
• To provide the contracted services and manage access to the private area. Legal basis: performance of the contract (Art. 6(1)(b)) and compliance with legal obligations (Art. 6(1)(c)).
• To protect the website against abusive use. Legal basis: legitimate interest in the security of our systems (Art. 6(1)(f)).
• To measure use of the website, only if you accept analytics cookies. Legal basis: your consent (Art. 6(1)(a)).

We do not make automated decisions or create profiles with your data.

Contact form data is kept for 12 months from the last interaction if we do not enter into a contractual relationship; after that period it is deleted. If you become a client, your data is kept for as long as the relationship lasts and, afterwards, for the periods required by law to address any possible liabilities.

We do not disclose your data to third parties, except where required by law. To provide the service we use web hosting and email providers that access the data solely as data processors, under a contract that complies with Article 28 GDPR. If any of them processes data outside the European Economic Area, the safeguards provided for in the GDPR (adequacy decision or standard contractual clauses) will apply.

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw the consent you have given at any time, without affecting the lawfulness of the processing carried out before its withdrawal. To do so, write to us at hola@indaga.tech stating the right you wish to exercise; if necessary, we will ask you to verify your identity.

If you consider that we have not processed your data correctly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

In the contact form, the fields marked with an asterisk are required to handle your request. This website is not aimed at children under 14.

We apply appropriate technical and organisational measures to protect your data, such as password encryption, role-based access control and secure connections.

We may update this policy to adapt it to legal or service changes. The date of the last update is shown at the top of this page.