Privacy policy

1. Data controller

Treecoms Hold, S.L., tax ID B93912368, registered at Calle de Francisco Tomás y Valiente, 5, bloque 3, 3.º D, 28660 Boadilla del Monte (Madrid), España. Privacy contact: [email protected].

2. An important starting point

This website is static. It has no database and no forms of its own: we do not collect or store personal data in our own systems through this site.

What we do is make third-party tools available to you — Google Forms, Calendly and Google Analytics — while our infrastructure providers process the technical data needed to serve the page. When you use those tools, your data is processed in those providers’ systems as processors acting on our behalf. Their holding it does not shift anything: we remain the controller and answer to you for it. This policy explains each case.

3. What we process, why, and on what legal basis

• Information requests (Google Forms). Your full name, email address, the area you need help with, the detail of what you need and the stage the project is at are required. You may also add a phone number, company, job title, website, expected timing, approximate budget and how you heard about us. Responses are stored in the Google services attached to our account, reachable only by the Treecoms team. Purpose: to answer your request and send you the information you asked for. Legal basis: the consent you tick explicitly on the form itself, withdrawable at any time, and pre-contractual steps taken at your request (art. 6(1)(a) and 6(1)(b) GDPR).
• Meeting bookings (Calendly). Name, email address and the slot you pick, plus anything you add in the notes field. Purpose: to schedule and manage the meeting. Legal basis: pre-contractual steps taken at your request (art. 6(1)(b) GDPR).
• Usage analytics (Google Analytics). Aggregated browsing data: page views, approximate visit duration, device type, browser and country. Purpose: to understand how the site is used and improve it. Legal basis: your consent, requested before the tool is activated and withdrawable at any time (art. 6(1)(a) GDPR).
• Security and delivery (Cloudflare and hosting). IP address, user agent and access logs, processed to serve the page, protect it against attack and detect abuse. Legal basis: our legitimate interest in keeping the site available and secure (art. 6(1)(f) GDPR).

4. Retention

Form responses and meeting data are kept for as long as the relationship with the person lasts and, afterwards, for the applicable statutory limitation periods. Where no relationship follows, they are deleted once the enquiry has been answered.

Analytics data is kept for the retention period configured in Google Analytics, and cookies for the durations listed in the Cookie policy. Technical security logs are kept for short periods, as configured by our providers.

5. Recipients and processors

We do not sell or disclose your personal data. We do rely on providers who process it on our behalf, each under a data processing agreement:

• Google Ireland Limited / Google LLC — Google Forms and Google Analytics.
• Calendly LLC — meeting scheduling.
• Cloudflare, Inc. — content delivery, security and consent management.
• OVH — website hosting.

6. International transfers

Some of these providers are established in the United States or may process data outside the European Economic Area. Those transfers rely on the safeguards in Chapter V GDPR: the EU-US Data Privacy Framework adequacy decision where the provider is certified and, failing that, the European Commission’s Standard Contractual Clauses together with any supplementary measures required.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent at any time — without affecting the lawfulness of processing carried out beforehand — by writing to [email protected] and stating which right you wish to exercise.

If you believe your request has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), the competent supervisory authority.

8. Children

This site is aimed at professionals and businesses. It is not intended for children under 14 and we do not knowingly collect their data.

9. Security

We apply appropriate technical and organisational measures to protect personal data, including HTTPS encryption across the whole site and the selection of providers offering sufficient security guarantees.

10. Changes to this policy

We may update this policy to reflect legal changes or changes in the tools we use. The date of the latest revision appears at the top of this page.