Privacy policy
Last updated: 25 September 2026
This English translation is provided for convenience only. In the event of any discrepancy, the Spanish version shall prevail.
This policy explains how your personal data is processed when you use this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
- Controller: Jessica Salvatierra
- Address: Rúa Salgueiral, 36800 Redondela (Pontevedra)
- Contact: info@impulsoweb360.es
2. What data we process
- Contact form: name, company, email, phone number, the service you are interested in and the message you write.
- WhatsApp and email: the data and messages you send us when you contact us through those channels.
- Browsing: only if you accept analytics cookies, statistical data about how you use the website (pages viewed, device, approximate location). See the Cookie policy.
We do not request special categories of personal data. If you hire us, the data of your company that we process to provide the service is governed by the contract and the corresponding non-disclosure agreement (NDA).
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Responding to your request, carrying out the assessment and preparing a proposal | Pre-contractual measures taken at your request (Art. 6.1.b GDPR) |
| Providing the contracted service and managing the business relationship | Performance of a contract (Art. 6.1.b GDPR) |
| Invoicing and tax and accounting obligations | Compliance with legal obligations (Art. 6.1.c GDPR) |
| Website usage statistics | Your consent, which you can withdraw at any time (Art. 6.1.a GDPR) |
We do not make automated decisions with legal effects on you or build commercial profiles. We do not send commercial communications without your consent.
4. How long we keep your data
- Requests that do not lead to a contract: up to 12 months from the last contact.
- Clients: for as long as the relationship lasts and, afterwards, for the statutory periods (6 years for commercial records and 4 years for tax records).
- Analytics data: the retention period configured in Google Analytics (14 months at most).
5. Who can access your data
We do not sell or share your data. The following providers process it, solely on our behalf:
- Vercel Inc. (USA): website hosting and contact form delivery.
- Email providers: receipt of emails and contact form notifications.
- Google Ireland Ltd. / Google LLC: Google Analytics, only if you accept cookies.
- WhatsApp Ireland Ltd. (Meta): if you choose to contact us on WhatsApp.
Some of these providers may process data outside the European Economic Area. In that case they do so with appropriate safeguards: the EU-U.S. Data Privacy Framework or the standard contractual clauses approved by the European Commission.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to info@impulsoweb360.es. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Security
We apply appropriate technical and organisational measures to protect your data: an encrypted connection (HTTPS), restricted access and, for contracted services, environments that do not use your data to train public artificial intelligence models.