Legal

Privacy policy

1. Data controller

The controller of the personal data processed through this website is:

  • Company name: SOLVILAR TECHNOLOGIES, S.L.
  • Tax ID (NIF): B05802319
  • Registered address: Calle Saboneria, 75, piso 5, puerta 1, 08204 Sabadell
  • Email: hola@solvilar.es
  • Phone: +34 640 91 69 13

2. What data we process and where it comes from

The data comes from you: you give it when you fill in a form on the website or contact us by email, phone or WhatsApp. In the forms, required fields are marked as such. We do not ask for special categories of data (health, beliefs, etc.): please do not include them in free-text fields.

  • Contact and quote request form: name, email, phone (optional), company, what you need, the size of your business, the channels through which you serve your customers and the text you write about your situation.
  • Free diagnosis: your website address, name, company and email.
  • Technical data of the submission: a random identifier for each submission (to avoid duplicates), the page and language you send it from and the result of the anti-bot check.
  • Anti-bot check (Cloudflare Turnstile): IP address, TLS fingerprint, User-Agent header and the website from which it is requested. This check is carried out by Cloudflare (section 6).
  • Communications by email, phone or WhatsApp: the data you give us in them.
  • Technical web server logs (such as IP address and date and time of the connection), which the server generates automatically for security and operational reasons. [PENDING VERIFICATION: retention period of these logs].

3. Purposes and legal bases

We use your data only for the following purposes, each with its legal basis under article 6.1 GDPR:

  • General enquiries, with no request for a service (form, email, phone or WhatsApp): to reply to you. Legal basis: your consent (art. 6.1.a), which you give by ticking the form box or by contacting us on your own initiative.
  • Quote requests and free diagnosis: to study your case and send you what you ask for. Legal basis: steps taken at your request before entering into a contract (art. 6.1.b).
  • Contractual relationship with customers: to provide the service, invoice and manage the relationship. Legal basis: performance of a contract (art. 6.1.b) and compliance with legal, tax and commercial obligations (art. 6.1.c).
  • Website security and prevention of automated or abusive submissions (anti-bot check and form trap field). Legal basis: Solvilar's legitimate interest in protecting its website and forms (art. 6.1.f). You can object to this processing by writing to hola@solvilar.es.
  • We do not send marketing communications or newsletters. If we ever did, it would only be with your prior consent (art. 21 of the Spanish LSSI-CE). We do not profile you or take automated decisions that have effects on you.

4. Whether providing data is required

Fields marked as required in each form are needed to handle your request: if you do not provide them, we cannot reply. The others are optional. Providing your data is not a legal or contractual requirement for visiting the website. You confirm that the data you give us is accurate and, if it belongs to someone else (for example an employee), that you have their permission.

5. Retention period

We keep data while it is needed for each purpose and, afterwards, for the periods required by law:

  • Enquiries and requests that do not become a contract: the time needed to handle them and, as Solvilar's own criterion, up to 12 months from the last communication, unless you withdraw your consent or object sooner.
  • Customers: for the duration of the contractual relationship and, afterwards, blocked and available only to public authorities, judges and courts during the limitation periods of possible liabilities (art. 32 of the Spanish LOPDGDD). In general, commercial and accounting documentation is kept for six years from the last entry (art. 30 of the Spanish Commercial Code); other periods, such as tax ones, may differ depending on the case.
  • Once the periods end, we delete or anonymise the data.

6. Recipients and providers

We do not sell your data or pass it to third parties, except where required by law (for example to public authorities, judges and courts). The following providers access it on Solvilar's behalf, as processors (art. 28 GDPR):

  • Request-management platform: the forms are sent to Solvilar's own CRM, which we run ourselves.
  • Web hosting: IONOS, which hosts solvilar.es on a server located in Spain.
  • Email: IONOS, which provides the email service for the hola@solvilar.es mailbox.
  • Cloudflare, Inc. (Turnstile): carries out the anti-bot check. According to its Turnstile privacy addendum, it acts as processor for that check and, in addition, processes the technical signals as controller to improve the service. It loads from its servers only when you reach a form.
  • WhatsApp: if you press the WhatsApp button or write to us that way, the communication takes place with WhatsApp, which processes your data as an independent controller under its own terms and privacy policy. Our website does not send data to WhatsApp until you press that link.

7. International transfers

Cloudflare, Inc. is headquartered in the United States. According to the information it publishes, transfers from the European Economic Area rely on its certification under the EU-US Data Privacy Framework, recognised by Commission Implementing Decision (EU) 2023/1795, and, if that certification ceased to be valid, on the European Commission's standard contractual clauses. For web hosting and email (IONOS) we are not aware of any transfers outside the EEA: the web server is in Spain. You can ask us for information about the applicable safeguards at hola@solvilar.es.

8. Your rights

You can exercise the following rights at any time:

  • Access: know what data of yours we process and get a copy.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: ask us to delete your data when, for example, it is no longer needed or you withdraw your consent.
  • Objection: object to processing based on our legitimate interest.
  • Restriction of processing in the cases provided by law.
  • Portability: receive the data you have given us in a structured, commonly used, machine-readable format, where processing is based on your consent or a contract.
  • Withdraw your consent whenever you wish, without affecting the lawfulness of earlier processing.
  • Not to be subject to decisions based solely on automated processing (we do not take any).

9. How to exercise your rights

Write to us at hola@solvilar.es saying which right you want to exercise. If we have reasonable doubts about your identity, we may ask you for the additional information needed to confirm it (art. 12.6 GDPR). We will reply within one month of receiving the request; if it is complex or we receive several, we may extend that by two further months and will tell you why within the first month (art. 12.3). Exercising your rights is free of charge; if requests are manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act (art. 12.5).

10. Complaints

If you believe we process your data contrary to the rules, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es; Paseo de la Castellana, 141, 28046 Madrid). You can contact us first: we will try to resolve it.

11. Security

We apply reasonable technical and organisational measures appropriate to the risk. Those we can vouch for on this website are: the connection to the site and the sending of forms are encrypted (HTTPS); the forms include an anti-bot check and a trap field; and the website loads no third-party tracking or advertising resources, and the fonts are served from our own server. No system is completely secure, so we cannot guarantee absolute protection. If a security breach posing a high risk to your rights occurred, we would tell you as required by article 34 GDPR.

12. Minors

This website is aimed at businesses and professionals and is not intended for minors. In Spain, consent from a child under fourteen requires that of their parents or guardians (art. 7 of the Spanish LOPDGDD). If you think a minor has given us data without that permission, write to us and we will delete it.

13. Cookies and storage on your device

The website does not use analytics or advertising cookies. It stores in your browser, in local storage, your language preference, your theme and your choice in the cookie notice; that data stays on your device. The details are in the Cookie policy.

14. Updates to this policy

We review this policy when processing, providers or the rules change. The current version is the one published on this page.

Last updated: 13 October 2026.

WhatsApp