Privacy policy

1. Data controller

BreachLess (NIF [COMPLETAR: owner.nif]), address: [COMPLETAR: owner.address], contact email: [COMPLETAR: owner.email].

2. Data we process and why

Data	Purpose
Name, email, company, domain, service of interest and message (contact form)	Handle your request, reply to you and prepare a proposal.
IP address (pseudonymised and temporary)	Site security: preventing spam, abuse and automated attacks.

3. Legal basis

• Your consent (Art. 6.1.a GDPR) by ticking the form checkbox and submitting it.
• Taking pre-contractual steps at your request (Art. 6.1.b GDPR).
• Our legitimate interest in the security of the site (Art. 6.1.f GDPR) for the technical processing of the IP.

4. Retention

Form messages are kept for a maximum of 12 months from receipt, or as long as necessary if a contractual relationship begins. Technical security data (pseudonymised IP) is deleted within 48 hours at most.

5. Recipients

We do not disclose your data to third parties except where legally required. Our hosting ([COMPLETAR: providers.hosting]) and email ([COMPLETAR: providers.mail]) providers may access it as data processors under the corresponding contract. No international transfers take place unless the provider states otherwise.

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to [COMPLETAR: owner.email], stating the right you wish to exercise and proving your identity. You may withdraw your consent at any time. If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security

We apply technical and organisational measures to protect your data: encryption in transit (HTTPS), strict input validation, usage limits, restricted access and periodic deletion.

8. Automated decisions

No automated decision-making or profiling is carried out with your data.