Legal
Privacy Policy
Last updated:
This policy sets out which personal data reaches us through this website, what we do with it and how you can control it. The contact form is the only place where we collect anything, so the policy is brief.
1. Who is responsible
Your personal data is controlled by SMOOTH OPERATOR SYSTEMS SL (“Smooth Operator Systems”, “we”, “us”), a limited company (sociedad limitada) registered in Spain. We do not have a public email address yet; please reach us through the contact form.
2. What we receive
Personal data reaches us only when you send the contact form. A submission contains:
- your name and, if you add it, your company;
- your email address and, if you add it, a phone number or messenger handle;
- the request type you pick and the project details you type;
- your confirmation that you have read this policy;
- technical details sent along with it: IP address, browser user agent, the language of the page, the URL of the page you sent it from, and the date and time.
If you only browse the site, we do not collect personal data ourselves. Netlify, our hosting provider, processes your IP address and request details in standard server logs on our behalf, to deliver the site and keep it secure.
3. Why we use it
We use the data to answer your enquiry, prepare a quote or proposal, and stay in touch about a possible or current project. The technical details help us keep the form free of spam and automated abuse, and record when and from where an enquiry arrived. Server logs are used only to run the site and protect it against attacks and misuse.
We do not use your data for automated decision-making or profiling.
4. Legal basis
- Art. 6(1)(b) GDPR — steps you ask us to take before a contract, and the performance of a contract with you.
- Art. 6(1)(f) GDPR — our legitimate interest in protecting the website and the form against abuse, and in keeping a record of business correspondence.
In Spain, processing is also governed by Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD). Giving us your data is optional, but we need it to reply.
5. How long we keep it
Enquiries are kept while we deal with them and for at most 24 months from the last message between us. If a contract follows, the related correspondence is kept for the life of the contract and for as long as accounting and limitation rules require. Server logs are kept by Netlify only for the limited period its service requires.
6. Who processes it for us
We never sell your data or pass it on for marketing. One provider processes it on our behalf:
- Netlify, Inc. — hosts this website, keeps the server logs, and receives and stores the form submissions. Netlify filters form submissions for spam automatically; for this it uses its own sub-processor, Akismet (Automattic Inc.), which checks the content of a submission.
Netlify may handle data outside the European Economic Area (EEA). Those transfers are covered by the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.
7. Cookies and analytics
We set no cookies and run no analytics. The only thing the site stores in your browser is your choice to pause the moving images, if you make that choice; it never leaves your device. Should we ever add cookieless analytics that respect privacy, this policy will be updated first; such tools would not identify you.
8. Your rights
Under the GDPR and the LOPDGDD you may:
- ask what data we hold about you and get a copy;
- have incorrect data corrected;
- have your data deleted;
- have processing restricted;
- get your data in a portable, machine-readable format;
- object to processing that relies on our legitimate interest;
- complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD, www.aepd.es), or to the supervisory authority of your own EU member state.
To use any of these rights, write to us through the contact form. We answer within one month.
9. Questions
For anything about this policy or your data, use the contact form.
10. Updates
We revise this policy whenever the website or the way we process data changes; the date above marks the current version.