BRONTOBYTE CLOUD / CORPORATE INFORMATION

Privacy policy

Information on the processing of personal data under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

Document prepared for legal validation. Items highlighted in copper are pending confirmation. This version of the website has no forms: contact is initiated by email or telephone.

1. Data controller

Controller: Gufo Sistems, S.L. (Brontobyte Cloud) · CIF B55298905
Registered office: Ronda del General Mitre, 126, 08021 Barcelona
Girona office: Carrer del Pic de Peguera, 15, 17003 Girona
Contact: info@brontobytecloud.com · 872 580 071 · 93 271 05 45
Data protection contact: info@brontobytecloud.com

2. What data we process and how we obtain it

This website contains no analytics tools. The personal data we process through it comes from:

The contact form and communications that users voluntarily initiate by email or telephone (name, company, email, telephone and the content of the enquiry). The form is processed by Netlify Forms and submissions are delivered to our corporate mailbox.
Technical access logs (IP address, date and time, page requested, browser) generated by the hosting provider for security and availability purposes. The site is hosted by Netlify, Inc. (San Francisco, USA), acting as data processor. [Pending: confirm the international transfer mechanism applied by Netlify (standard contractual clauses / EU-US Data Privacy Framework) and the access-log retention period]

3. Purposes and legal basis

Responding to enquiries and requests for information and, where appropriate, preparing commercial proposals. Legal basis: pre-contractual measures at the data subject’s request (Art. 6(1)(b) GDPR) and legitimate interest in responding to professional communications (Art. 6(1)(f) GDPR).
Managing the commercial and contractual relationship with clients and partners. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Ensuring the security and proper functioning of the website. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Complying with applicable legal obligations. Legal basis: Art. 6(1)(c) GDPR.

4. Recipients

Data is not disclosed to third parties except where required by law. Providers that deliver services to Gufo Sistems, S.L. as processors (web hosting, email, management tools) may access the data under agreements compliant with Art. 28 GDPR. Identified processors: Netlify, Inc. (hosting and contact form). [Pending: add the email provider and confirm international transfer safeguards]

5. Retention

Contact data is kept for as long as the relationship lasts or as needed to handle the enquiry, and thereafter blocked for the limitation periods of any legal liability. [Pending: specific periods according to the internal retention policy]

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to info@brontobytecloud.com or to either postal address above, providing proof of identity. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security

Gufo Sistems, S.L. applies the technical and organisational measures of its information security management system, certified to ISO/IEC 27001 and to Spain’s National Security Framework (ENS, medium category) within the scope stated in the official certificates.

Last reviewed: [date of legal validation]