Legal
Privacy policy
Translation for information purposes. This is an English translation of the Spanish privacy policy. In the event of any discrepancy, the Spanish version shall prevail.
Last updated: 7 October 2026
In accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we inform you about how we process your personal data.
1. Data controller
- Identity: Sala Siete Consulting S.L.
- Tax ID (CIF): B56964349
- Contact email for privacy matters: itconsulting@salasiete.es
2. Data we process
Through the contact form we process the following data: first name, last name, company, email, phone number (optional), reason for contact and the content of the message. We do not collect special categories of data.
For security reasons and to prevent abuse of the form, a pseudonymised identifier (hash) of the IP address is processed temporarily and deleted automatically after a short period.
3. Purposes of processing
- To handle and respond to enquiries and requests for information.
- To manage, where applicable, the pre-contractual or business relationship arising from the request.
- To manage job applications when the reason for contact is “Working with us”.
- To ensure the security of the website and prevent fraudulent or automated form submissions.
4. Legal basis
The legal basis for processing is the consent of the data subject (art. 6.1.a GDPR), given by ticking the acceptance box on the form, and legitimate interest (art. 6.1.f GDPR) as regards the security of the website.
5. Data retention
Data will be kept for as long as necessary to handle the request and, thereafter, for the periods required by law. If the enquiry does not lead to a business relationship, the data will be deleted one year after the last communication. If a business relationship begins, the data will be kept for the periods required by applicable law (for example, six years under the Spanish Commercial Code).
6. Recipients
Data will not be disclosed to third parties unless required by law. Providers that render services to the controller (web hosting, email) may have access to the data, under the corresponding data processing agreements. Specifically, web hosting and email are provided by Raiola Networks, a company established in Spain with servers in the European Union. No international data transfers take place.
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to itconsulting@salasiete.es and stating the right you wish to exercise.
If you believe the processing does not comply with the regulations, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
We apply appropriate technical and organisational measures to protect personal data, including encryption of communications via HTTPS, protection of the form against automated submissions and restricted access to information.