Privacy Policy

Data controller

Controller: Liliana Bolós Fernández (sole trader / self-employed), operating under the trade name IVALOR Consulting.
Contact and exercise of rights: contactos@ivalorconsulting.com

Data collected

Name, company, email, job title and a voluntary message submitted through the contact form.

Legal basis

• Handling your enquiry or demo request (form): performance of pre-contractual measures taken at the data subject's request (Art. 6(1)(b) GDPR).
• Sending commercial communications: the data subject's consent (Art. 6(1)(a) GDPR); only if you tick the corresponding box. It may be withdrawn at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Web analytics (Umami, aggregated and pseudonymised): legitimate interest in understanding and improving the website (Art. 6(1)(f) GDPR), with no profiling and without retaining the IP address.

Purpose

Handling enquiries and requests for information. Sending commercial communications only with explicit consent.

Recipients and processors

To handle your request we rely on providers that process data on behalf of the controller (processors), bound by a data processing agreement (Art. 28 GDPR) and with appropriate safeguards for any international data transfer:

• Resend (Resend, Inc., USA): delivery of the notification email generated by the contact form. The international transfer relies on appropriate safeguards (standard contractual clauses approved by the European Commission and/or adherence to the EU–US Data Privacy Framework).
• HubSpot (HubSpot, Inc.): the CRM in which your request is recorded for its management and follow-up. The data is hosted in the European Union region (EU1) and the entity adheres to the EU–US Data Privacy Framework.

The technical connection between the form and the CRM is carried out through an automation tool (n8n) hosted on our own infrastructure in the European Union (Hetzner, Germany). No data is disclosed to third parties for their own purposes, and no automated decisions producing legal effects on you are taken.

Retention

Form data is retained for as long as your request is being handled and, if a relationship begins, for the duration of the business relationship; thereafter it is blocked during the applicable statutory limitation periods. Prospecting data obtained from professional sources is retained for the period stated in the corresponding section. In all cases you may request its erasure.

Commercial prospecting from professional sources (LinkedIn)

On a selective basis we may reach out to professionals whose public profile is relevant to our activity —for example, through LinkedIn— in order to introduce ourselves and start a professional conversation in the B2B sphere.

Source of the data: publicly accessible professional profile (LinkedIn) and, where applicable, the associated professional contact details. Data processed: name, job title, company and professional contact details. Legal basis: legitimate interest in the B2B promotion of our services (Art. 6(1)(f) GDPR), balanced against your rights and limited to contacts within their strictly professional sphere. Recipients: this data is recorded in our CRM (HubSpot, EU/EU1 region, adhering to the EU–US Data Privacy Framework) as processor. Retention: a maximum of 12 months from the last contact if no relationship begins, after which it is erased or anonymised. Your right to object: you may object at any time to this processing, including profiling (Art. 21 GDPR), by writing to contactos@ivalorconsulting.com; we will act on your objection without you having to justify your particular situation.

Your rights (access, rectification, erasure and others)

You may exercise your rights of access, rectification, erasure, objection, portability and restriction of processing by sending an email to contactos@ivalorconsulting.com.

Supervisory authority

The Spanish Data Protection Agency (AEPD) — aepd.es

Cookies

This website does not use cookies or persistent identifiers for tracking purposes, and therefore no cookie banner is displayed. For usage measurement we use a cookieless analytics tool, described in the following section.

Web analytics

We use Umami, a web analytics tool hosted on our own servers (Hetzner, Germany — European Union), which operates without cookies or persistent identifiers (which is why no consent banner is shown).

Purpose: aggregated measurement of website usage. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Data: Umami does not retain your IP address: it uses it transiently to generate a pseudonymised identifier and an approximate geolocation (country/region), without storing it or building profiles; the data is processed only in aggregated form. Scope: given its aggregated and pseudonymised nature, and as no information is stored on your device, this measurement is carried out on the basis of our legitimate interest (Art. 6(1)(f) GDPR) without requiring your consent; you may object at any time (see "Rights" above). Recipients: none; the information never leaves our infrastructure. Rights: you may object to the processing (Art. 21 GDPR) by writing to contactos@ivalorconsulting.com.