1. Data Controller
The data controller responsible for your personal data is:
VEROSTRIVE S.L.
FN. EL CANARIO, 1
21440 Lepe (Huelva), Spain
Email: verostrivesl@gmail.com
Website: https://verostrive-sl.com
VEROSTRIVE S.L. operates as an IT marketing agency and processes personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR), Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), and, where applicable, Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE).
2. Scope of This Policy
This Privacy Policy applies to personal data collected through:
- Our website and any contact forms or communication channels linked to it
- Email correspondence and business enquiries directed to VEROSTRIVE S.L.
- Pre-contractual discussions, proposals, and client onboarding for IT marketing services
- Analytics and marketing technologies deployed on our website, where you have provided consent
This policy does not cover third-party websites, platforms, or services that may be linked from our site. Those providers operate under their own privacy terms.
3. Categories of Personal Data We Process
Depending on your interaction with us, we may process the following categories of data:
- Identification and contact data — name, company name, job title, email address, telephone number, postal address
- Professional and business data — industry sector, marketing objectives, project requirements, billing details where relevant to a contract
- Technical and usage data — IP address, browser type, device identifiers, operating system, pages visited, session duration, referral URLs, and similar telemetry collected through cookies or comparable technologies
- Communication data — content of messages, meeting notes, and records of correspondence with our team
- Consent records — your cookie preferences and evidence of consent or withdrawal, stored to comply with GDPR and ePrivacy requirements
We do not intentionally collect special categories of personal data as defined in Article 9 GDPR (such as health data or biometric data). Please do not send us such information unless strictly necessary and with an appropriate legal basis.
4. Purposes and Legal Bases for Processing
We process personal data only where a legal basis under Article 6 GDPR applies. The main purposes are:
4.1 Website operation and security
To deliver, maintain, and protect our website, including load balancing, fraud prevention, and troubleshooting.
Legal basis: legitimate interest (Article 6(1)(f) GDPR) in ensuring the security and proper functioning of our digital services, balanced against your rights and freedoms.
4.2 Responding to enquiries and managing relationships
To respond to contact requests, schedule meetings, prepare proposals, and communicate about potential or active IT marketing engagements.
Legal basis: pre-contractual steps at your request (Article 6(1)(b) GDPR) and, where applicable, performance of a contract (Article 6(1)(b) GDPR).
4.3 Delivery of IT marketing services
To plan, execute, report on, and improve digital marketing campaigns and related professional services for clients.
Legal basis: performance of a contract (Article 6(1)(b) GDPR) and legitimate interest (Article 6(1)(f) GDPR) in managing client accounts effectively.
4.4 Analytics and website improvement
To understand how visitors use our website, measure performance, and improve content and user experience — only where you have accepted analytics cookies through our consent banner.
Legal basis: consent (Article 6(1)(a) GDPR). You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
4.5 Marketing and audience measurement
To evaluate campaign effectiveness, attribute traffic sources, and refine our own marketing communications — only where you have accepted marketing cookies or otherwise provided consent.
Legal basis: consent (Article 6(1)(a) GDPR).
4.6 Legal, tax, and regulatory compliance
To fulfil accounting, invoicing, record-keeping, and other obligations imposed by applicable Spanish and EU law.
Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).
5. Cookies and Similar Technologies
Our website uses cookies and similar storage technologies. In line with the GDPR, LOPDGDD, and the ePrivacy framework, non-essential cookies are placed only after you provide consent through our cookie banner.
We classify cookies as follows:
- Essential cookies — required for core functionality, security, and storing your cookie preferences. These cannot be disabled through our banner because the site cannot operate correctly without them.
- Analytics cookies — help us measure traffic, page performance, and user journeys. Activated only with your consent.
- Marketing cookies — support campaign measurement and marketing optimisation. Activated only with your consent.
You can accept all cookies, reject non-essential cookies, or manage preferences at any time using the cookie settings control displayed on our website. You may also configure your browser to block or delete cookies; note that disabling essential cookies may affect site functionality.
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this policy, unless a longer period is required or permitted by law.
- Contact and enquiry data — retained for the duration of communications and up to 24 months thereafter, unless a business relationship is established
- Client and contract data — retained for the life of the contract and for the statutory limitation periods applicable under Spanish law thereafter
- Accounting and tax records — retained for the periods required by Spanish commercial and tax legislation, generally up to 6 years
- Cookie consent records — retained to demonstrate compliance with consent requirements for a reasonable period consistent with regulatory guidance
- Analytics and marketing data — retained according to the configuration of the relevant tool and only while consent remains valid or until you withdraw consent
When data is no longer required, we securely delete or anonymise it.
7. Recipients and International Transfers
Access to personal data is limited to authorised personnel of VEROSTRIVE S.L. and to processors that provide services on our behalf, such as hosting providers, email services, analytics platforms, and professional advisers, under written agreements that comply with Article 28 GDPR.
We do not sell personal data. We may disclose data where required by law, court order, or competent authority, or to protect the rights, property, or safety of VEROSTRIVE S.L., our clients, or others.
Some service providers may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, an adequacy decision, or another mechanism recognised under Chapter V GDPR.
8. Security Measures
VEROSTRIVE S.L. implements appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access, taking into account the nature of the data and the risks involved.
Measures may include access controls, encrypted connections (HTTPS), secure hosting environments, password policies, and limited access on a need-to-know basis. No method of transmission over the internet is completely secure; while we strive to protect your data, we cannot guarantee absolute security.
9. Your Rights Under GDPR and LOPDGDD
As a data subject, you have the following rights, subject to conditions and exceptions set out in applicable law:
- Right of access (Article 15 GDPR) — to obtain confirmation of whether we process your data and receive a copy of it
- Right to rectification (Article 16 GDPR) — to request correction of inaccurate or incomplete data
- Right to erasure (Article 17 GDPR) — to request deletion where data is no longer necessary, consent is withdrawn, or processing is unlawful
- Right to restriction of processing (Article 18 GDPR) — to request limited processing in certain circumstances
- Right to data portability (Article 20 GDPR) — to receive data you provided in a structured, commonly used, machine-readable format where processing is based on consent or contract and carried out by automated means
- Right to object (Article 21 GDPR) — to object to processing based on legitimate interests, including profiling, and to object at any time to direct marketing
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time via our cookie settings or by contacting us
- Right not to be subject to automated decision-making (Article 22 GDPR) — we do not use solely automated decision-making that produces legal or similarly significant effects
To exercise any of these rights, contact us at verostrivesl@gmail.com. We will respond within one month, extendable by a further two months where requests are complex, as permitted under Article 12 GDPR.
You also have the right to lodge a complaint with the Spanish Data Protection Authority:
Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6, 28001 Madrid, Spain
Website: www.aepd.es
10. Minors
Our website and IT marketing services are directed at business professionals and are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can take appropriate action.
11. Changes to This Privacy Policy
We may revise this Privacy Policy to reflect changes in our processing activities, legal requirements, or website functionality. The updated version will be published on this page. We encourage you to review this policy periodically.
Where changes materially affect how we process your personal data and such processing is based on consent, we will seek renewed consent where required by law.
12. Contact
For any questions about this Privacy Policy or our data protection practices, contact:
VEROSTRIVE S.L.
FN. EL CANARIO, 1, 21440 Lepe (Huelva), Spain
Email: verostrivesl@gmail.com