Privacy policy
Last update: 31 May 2026.
1. Data controller
- Identity: Impulso Tecnológico S.L.
- Tax ID (CIF): ES-B82696105
- Postal address: Calle Delmira Agustini 5, local 4, 28021 Madrid – España
- Phone: +34 91 505 7575
- Email: contacto@impulsotecnologico.com
- Data Protection Officer (DPO): dpo@impulsotecnologico.com
2. Purposes of processing
The personal data you provide will be processed for the following purposes:
- Handle contact and quote requests. Manage enquiries sent through the web form or by email and, reply by email or phone and, if applicable, prepare the commercial proposal. When enabled, a virtual or automated assistant may help qualify the enquiry before human review.
- Contract management. If you become a client, process your data to deliver the contracted service: billing, support, operational communications.
- Marketing communications (with consent only). Keep you informed about news, events, guides and services from Impulso Tecnológico. You may oppose this use at any time.
- Compliance with legal obligations. Retain tax, accounting and labour documentation for the legally established periods.
3. Legal basis for processing
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Handling contact requests | Consent (6.1.a) / Legitimate interest |
| Contract performance | Necessary for contract performance (6.1.b) |
| Marketing communications | Explicit consent (6.1.a) |
| Legal obligations (tax, labour) | Compliance with legal obligation (6.1.c) |
4. Retention period
- Requests that don't result in a contract: up to 1 year from the last contact, unless removal is requested earlier.
- Contractual relationship: for the duration of the contract and afterwards during legal limitation periods (4–6 years for tax/accounting).
- Marketing data: until you withdraw your consent.
5. Recipients and data transfers
Your data will not be transferred to third parties except where required by law. It will be shared with the following data processors, who act on our behalf under contract and with guarantees equivalent to ours:
- Hosting and email provider (servers located in the EU).
- CRM provider (Odoo) for commercial management.
- Communication and support tooling provider.
No international data transfers are made outside the European Economic Area (EEA), except where expressly indicated and, in that case, with the guarantees required by the GDPR (European Commission Standard Contractual Clauses).
6. Automated decisions and profiling
Impulso Tecnológico S.L. does not make automated decisions based solely on personal-data processing that produce legal effects or significantly affect the data subject. Using a virtual assistant to organise or qualify a contact request does not create a binding automated decision and does not replace human review where needed.
7. Your rights
You have the right to:
- Access — know what data we hold about you.
- Rectification — correct inaccurate data.
- Erasure ("right to be forgotten") — request deletion of your data.
- Object — to the processing of your data for a specific purpose.
- Restrict processing.
- Portability — receive your data in a structured format.
- Withdraw consent previously given.
- Lodge a complaint with the AEPD — Spanish Data Protection Agency (aepd.es), the competent supervisory authority.
To exercise these rights, get in touch with us specifying the right you want to exercise and attaching a copy of your ID document. We will respond within one month of receiving the request.
8. Security measures
We apply appropriate technical and organisational measures to guarantee a security level appropriate to the risk of processing: in-transit (TLS 1.2+) and at-rest encryption, least-privilege access control, regular backups, ongoing staff training and annual review of implemented measures.
9. Changes to this policy
Impulso Tecnológico S.L. may modify this policy at any time to reflect regulatory or service changes. Any modification will be notified through the website itself, with the date of update in the document header.