Privacy Policy and Terms and Conditions of GALPÓN DC

Data Controller Information

Company name: GALPÓN DC S.L.

Registered address: Seville, Spain

Email address: salva.lope@galpon.eu

Telephone number: +34 660 336 260

Personal Data Collected

GALPÓN DC collects and processes the following categories of personal data:

• Identification data: full name or business name
• Contact data: email address and telephone number
• Technical and usage data: IP address, browser data, cookies, and navigation-related metadata

Purpose of Data Processing

Personal data are processed strictly for the following legitimate purposes:

• Management of enquiries and requests.
• Commercial communications, where legally permitted.
• Website improvement and security.

Legal Basis for Processing

The processing of personal data is carried out in accordance with Article 6 of Regulation (EU) 2016/679 (GDPR), based on one or more of the following legal grounds:

• The data subject’s explicit consent.
• The performance of a contract or pre-contractual measures.
• Compliance with applicable legal obligations.
• Legitimate interests pursued by GALPÓN DC.

Recipients of Personal Data

Personal data may be disclosed exclusively to the following categories of recipients:

• Service providers acting as data processors under contractual obligations.
• Public authorities or judicial bodies where required by law.

International Data Transfers

GALPÓN DC does not carry out international transfers of personal data outside the European Economic Area (EEA).

Data Retention Period

Personal data shall be retained only for the period strictly necessary to fulfil the purposes for which they were collected or as required by applicable law.

Security of Personal Data

GALPÓN DC implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including encryption, access control mechanisms, and secure infrastructure located within the European Union.

Galpón DC reserves the right to implement new cryptographic technologies, including post-quantum cryptography, once such technologies have reached the required levels of security and stability, subject to prior notification to users.

Data Subject Rights (ARSULIPO)

Data subjects may exercise the following rights in accordance with the GDPR:

• Right of access.
• Right to rectification.
• Right to erasure (“right to be forgotten”).
• Right to restriction of processing.
• Right to data portability.
• Right to object.

Requests must be submitted in writing together with sufficient proof of identity.

Automated Decision-Making

GALPÓN DC does not carry out automated individual decision-making, including profiling.

Governing Law and Jurisdiction

This Privacy Policy and any related legal relationship shall be governed exclusively by European Union law and, where applicable, Spanish law.

Any dispute shall be submitted exclusively to the competent courts of Spain.