Data controller
- Controller: Sonlec
- Email: [email protected]
For any question about your personal data, you can write to us at that address.
What data we process and why
2.1 Contact form
When you write to us through the contact form, we process the data you give us: name, email address, message and, if you provide them, phone number and company. When you send it, we also record the IP address you send it from and the country it belongs to.
- Purpose: to answer your enquiry and, if you ask us to, prepare a quote or a proposal for our services. The IP address and country, to keep a record of the submission and to protect the form against abuse and spam.
- Legal basis: taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR). If your enquiry is not about our services, our legitimate interest in answering the messages we receive (Art. 6(1)(f) GDPR). For the IP address and country, our legitimate interest in keeping a record of the submission and preventing abuse (Art. 6(1)(f) GDPR).
- Retention: for as long as needed to deal with your enquiry. If you then hire us, for the duration of our business relationship and, once it ends, for the periods required by law (for example, tax and commercial law). The IP address and country are kept together with the message.
Name, email address and message are required: without them we cannot reply. We will not use this data to send you marketing.
2.2 Visit statistics
We use Cloudflare Web Analytics to find out how many visits the website receives and which pages are viewed. It does not use cookies or store anything in your browser, does not track you across websites and only shows us aggregate data: we cannot tell who you are.
- Purpose: to measure how the website is used and improve it.
- Legal basis: our legitimate interest in understanding how the website is used (Art. 6(1)(f) GDPR).
- Retention: for the limited period set by Cloudflare.
2.3 Technical browsing data
As with any website, when you visit it your browser sends technical data (IP address, browser, language, requested page). Our hosting provider processes it to serve the website and protect it against attacks.
- Legal basis: our legitimate interest in keeping the website working and secure (Art. 6(1)(f) GDPR).
- Retention: technical logs are kept for the limited period set by the provider.
Who we share data with
We do not sell or pass on your data to third parties. It is only accessed by the providers we need to run the website, who act as processors on our behalf under contracts that require them to protect it:
- Cloudflare, Inc. (United States): website hosting, security and visit statistics (Cloudflare Web Analytics).
- Resend (United States): delivery of contact form messages to our inbox.
We may also disclose data to the authorities where the law requires us to.
International transfers
These providers are based in the United States or may process data there. These transfers rely on the EU-US Data Privacy Framework, where the provider is certified, or on the standard contractual clauses approved by the European Commission.
Your rights
You can exercise your rights at any time to:
- Access: find out what data about you we process.
- Rectification: correct any inaccurate data.
- Erasure: ask us to delete it.
- Object to and restrict processing.
- Portability: receive it in a structured format.
To exercise them, write to [email protected] stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask for additional information to confirm it. We will reply within one month at most.
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or the supervisory authority in your country.
Children
This website is aimed at businesses and professionals. We do not knowingly collect data from children under 14; if we find out that we have, we will delete it.
Security
The whole website runs over an encrypted connection (HTTPS), and we apply appropriate technical and organisational measures to protect your data against loss, alteration or unauthorised access.
Automated decisions
We do not make automated decisions or build profiles with your data.
Third-party trademarks and logos
The names, trademarks and logos of third parties shown on this website (for example, Proxmox, Kubernetes, Docker, TrueNAS, Unraid, UniFi, Cloudflare, Seagate, Astro, TypeScript or PostgreSQL) belong to their respective owners. We show them only to describe the technologies and products we work with.
Their presence does not mean that their owners sponsor, endorse or recommend Sonlec or our services, nor that we have any commercial, partnership or affiliate relationship with them, unless we expressly say so.
Changes to this policy
We may update this policy if the law or the way we process data changes. The current version will always be published here with its date.