Privacy policy

In short

We only process the data you send through the contact form, and only to reply to you. We do no profiling, we sell data to no one, we use no advertising cookies, and we send no marketing unless you ask for it by ticking a separate box.

Data controller

CERTIAE, S.L., tax ID B-00000000, registered office at PENDIENTE: calle y número, 00000 PENDIENTE: ciudad (PENDIENTE: provincia), Spain.

Data protection contact: privacidad@certiae.com.

What data we process

Data you provide in the contact form: full name, company, role or profile, email address, phone number if supplied, type of enquiry and the description you write.

Data from subsequent communications: if the conversation continues by email or phone, whatever is exchanged in that context.

Technical browsing data: our hosting provider automatically records IP addresses and request data in server logs, for security and operational reasons. We do not cross-reference these with form data, nor use them to identify you.

What we use it for

Responding to your enquiry, assessing how your project or profile fits, and maintaining the communication arising from that request.

Managing the commercial or working relationship if the enquiry moves forward.

Sending you commercial communications about CERTIAE activity, only if you tick the relevant box.

Keeping the site secure and preventing automated or abusive submissions.

Legal basis

Responding to your enquiry: pre-contractual measures taken at your request (Art. 6.1.b GDPR) and, where no pre-contractual relationship exists, the legitimate interest of CERTIAE in replying to those who contact it (Art. 6.1.f GDPR).

Commercial communications: your consent (Art. 6.1.a GDPR), independent from submitting the enquiry and withdrawable at any time without affecting the lawfulness of prior processing.

Site security and technical logs: the legitimate interest of CERTIAE in protecting its systems (Art. 6.1.f GDPR).

How long we keep it

Enquiry data is kept for 12 months from the last contact, unless the relationship continues or a longer statutory retention obligation applies, such as those arising from commercial or tax rules.

Data linked to marketing consent is kept until you withdraw it. Technical server logs are kept for the period applied by the hosting provider, usually short.

Who we share it with

We do not share your data with third parties except where legally required or upon request from a competent authority.

It may be accessed by providers delivering services to CERTIAE (web hosting, email and management tools), acting as data processors under contract with the safeguards of Article 28 GDPR. Hosting provider: Contabo GmbH, with servers in Germany (European Union).

No international transfers outside the European Economic Area take place. Should any become necessary, they will rely on one of the safeguards in Chapter V GDPR and this policy will be updated.

Automated decisions

We carry out no profiling and take no automated decisions producing legal effects concerning you or similarly significantly affecting you.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent given, by writing to privacidad@certiae.com. State the right you wish to exercise and include a means of verifying your identity.

We will reply within one month of receiving the request, extendable under the terms set out in the GDPR.

If you believe the processing does not comply with the applicable rules, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), without prejudice to contacting us first.

Third-party data and accuracy

The data you provide must be accurate and up to date. If you include another person data, you must have informed them beforehand of the content of this policy and obtained their consent where necessary.

Security and sensitive documentation

We apply reasonable technical and organisational measures to protect data against unauthorised access, loss or alteration, including encrypted transmission of information sent from this site.

Please do not include sensitive documentation or confidential project information in the contact form. If it needs to be reviewed, CERTIAE will indicate the appropriate channel and the applicable confidentiality terms.

Changes to this policy

This policy may be updated to reflect regulatory changes or changes in how we process data. The version in force will always be published on this page.

Last updated: 28 August 2026.