Privacy Policy
At Elema Control, we treat your personal data with the same care we apply to our clients' data. This policy explains what data we collect when you visit or contact us through this site, what we use it for, and what rights you have.
1. Data controller
- Identity: Laura María Martín Juan (Elema Control)
- Tax ID (NIF): 47254240G
- Email: hola@elemacontrol.com
2. What data do we collect?
This site does not have its own data-collection form. When you contact us via WhatsApp, email, Instagram or LinkedIn through the links on the site, we only access the data you voluntarily choose to share with us at that time: name, phone number or username, email address, and the content of your message.
This site does not use analytics or advertising cookies, and fonts are served from our own server, without loading third-party resources. As with any website, the hosting provider may record technical data about your visit (IP address, date and time, page requested) for security and service-operation purposes.
3. Purpose and legal basis for processing
| Purpose | Legal basis |
|---|---|
| Handling your request for information about contracting our services | Pre-contractual measures taken at the request of the data subject (Art. 6.1.b GDPR) |
| Responding to other general enquiries | Legitimate interest in responding to those who contact us (Art. 6.1.f GDPR) |
| Providing the contracted service, should you become a client | Performance of a contract |
| Complying with tax and accounting obligations arising from the business relationship | Compliance with a legal obligation |
4. How long do we keep your data?
Data from enquiries or initial contact is kept for the duration of the commercial conversation, and deleted if it does not lead to a client relationship, at most within 12 months of the last contact. If you become a client, data is kept for the duration of the contractual relationship and, afterwards, for the legally required tax retention periods (generally 4-6 years).
5. Who do we share your data with?
We do not share your data with third parties, except where legally required. We use technology providers acting as data processors under contract, in accordance with Article 28 of the GDPR: the web hosting, domain and email provider (Raiola Networks, with services in Spain); the email and productivity services we use to manage those messages (Microsoft and Google), which may involve international transfers covered by standard contractual clauses or the EU-US Data Privacy Framework; and, should you become a client, the invoicing and management tools used to deliver the service.
If you contact us via WhatsApp, Instagram or LinkedIn, your data is also processed by those platforms (for example, Meta Platforms Ireland Limited) as independent controllers under their own privacy policies; this may involve international data transfers covered by the safeguards each platform applies (standard contractual clauses or the EU-US Data Privacy Framework).
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing, and portability at any time by writing to hola@elemacontrol.com, enclosing a copy of an identity document. Where any processing is based on your consent, you may withdraw it at any time. No automated decisions are made and no profiling is carried out using your data. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe the processing does not comply with applicable regulations.
7. Security measures
We adopt reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration, in accordance with the GDPR and Spanish Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD).
8. Data processed as a data processor
When we provide services to a client, the personal data of the people that client invoices or deals with (the client's customers, suppliers or employees) is processed on the client's behalf, as controller, under the service agreement and the corresponding data processing agreement. This policy does not govern that processing.