1. Controller
4 REASONS 2024, S.L. (sociedad unipersonal, a single-member company), trading as “Annexa”, tax ID B75718510, C/ San Luis, 52, 2.º C, 03181 Torrevieja (Alicante, Spain), info@annexa.es. We have not appointed a data protection officer because we are not required to (art. 37 GDPR and art. 34 of the Spanish Data Protection Act, LOPDGDD).
2. Scope
This explains how we handle your data when you visit annexa.es, email us or book a demo. Today the site has no contact forms, sign-up or payments; the calculators run in your browser and do not send or store what you type. When we open forms, sign-up or payments, we will update this policy before collecting any data.
3. What data we process, why and on what legal basis
a) Enquiries and demos
Name, email, company and whatever you tell us, by email to info@annexa.es or when booking on Calendly, to answer you and run the demo. Basis: our legitimate interest in answering people who contact us, usually on behalf of their company (art. 6.1.f GDPR and art. 19 LOPDGDD) or, if you are self-employed and ask for the demo with a view to subscribing, pre-contractual steps at your request (art. 6.1.b). We keep it for 12 months from the last contact; after that, blocked, only while liability claims may arise (art. 32 LOPDGDD).
b) Site visits
IP address, date and time, page and browser, in the hosting provider’s technical logs, to serve the site and protect it from abuse. Basis: legitimate interest in the site’s security (art. 6.1.f). Kept for the minimum period set by the provider.
Giving us your data is voluntary, but without an email address we cannot answer you or arrange the demo. We do not make automated decisions or profile you. If you give us other people’s data (for example, demo guests), please inform them of this policy.
4. Recipients
We do not disclose your data except where required by law. The following process data on our behalf, as processors: Vercel (website hosting), Google (info@annexa.es email) and Calendly (demo booking).
5. International transfers
Vercel, Calendly and Google may process data in the United States, under the EU-US Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795) or standard contractual clauses. You can ask us for a copy of those safeguards at info@annexa.es.
6. Your rights
Access, rectification, erasure, objection, restriction and portability: write to info@annexa.es, ideally from the address you used with us; we will only ask for more information if we have reasonable doubts about your identity (art. 12.6 GDPR). You may complain to the Spanish Data Protection Agency (www.aepd.es).
7. Security
We apply appropriate technical and organisational measures (encryption, access control, backups).
8. Changes
If it changes, we will publish it here with the date and, if relevant, email you.