Privacy Policy

Last updated: November 2026

1. Controller

Data controller: Alejandro Edeso Sanz, NIF 58006961H, trading as Deika, Castillo de Ocio 16, 01007 Vitoria-Gasteiz, Spain. Contact: [email protected].

2. Data we process

(a) Contact data you send us (name, business, email, phone, message). (b) Publicly available business contact details (business name, business email, phone, website) of companies we may contact about our services. (c) Billing data for customers, processed by our payment provider. (d) Basic technical logs from our hosting provider.

3. Purposes and legal bases (GDPR Art. 6)

Replying to inquiries and providing services (contract / pre-contract, Art. 6(1)(b)); business-to-business outreach to publicly listed business contacts (legitimate interest, Art. 6(1)(f)); invoicing and tax obligations (legal obligation, Art. 6(1)(c)).

4. Business outreach and opt-out

We only contact businesses, using contact details they publish for business purposes. Every message includes our identity, a postal address and an opt-out. If you reply "unsubscribe" or email us, we stop contacting you and keep only a suppression record so we do not contact you again.

5. Recipients and transfers

Hosting, email and payment providers acting as processors. Some may be located outside the EEA (e.g. the US); in that case transfers rely on adequacy decisions (e.g. EU-US Data Privacy Framework) or Standard Contractual Clauses.

6. Retention

Inquiries: up to 12 months. Non-responding outreach contacts: up to 12 months. Customer and billing records: as required by Spanish tax law. Suppression list: kept as long as needed to honor opt-outs.

7. Your rights

Access, rectification, erasure, restriction, objection and portability by emailing [email protected]. You may complain to the Spanish Data Protection Agency (AEPD, aepd.es). California residents may also have rights under the CCPA; we do not sell personal information.

8. Cookies

This website does not use tracking or advertising cookies.