Privacy policy

1. Controller

GESTIÓN EMPRESARIAL SERVIBIT, S.L. · tax ID B86105921 · C/ Mártires, 35, L26 bis, 28660 Boadilla del Monte, Madrid, España · contacto@servibit.es.

2. Data and sources

We may process contact details, company, request content, optional marketing preferences, pseudonymous security metadata, privacy-choice records, SMTP delivery metadata and, only with analytics consent, random visitor/session identifiers, pages, sections, active time, scroll, clicks, language, device/browser/OS data, the full IP address, pseudonymous IP-derived data and approximate geography when a local source is configured. Data is mainly provided by the user or generated by the technical operation of the site.

3. Purposes and legal bases

Requests and pre-contractual steps rely on Article 6(1)(b) GDPR where applicable; general professional enquiries may rely on legitimate interests under Article 6(1)(f). Additional marketing requires consent or another valid legal basis. SERVIBIT keeps a history of explicit grants and withdrawals so that only the latest decision is used for campaign lists and opt-out can be evidenced. Security processing relies on legitimate interests and applicable security obligations. Cookie-choice records support compliance and demonstrability of user decisions.

4. Contact form and transactional email

Requests are stored in protected local SQLite before SMTP notifications are attempted. Email validation, local CAPTCHA and rate limiting are used to reduce abuse. Transactional confirmation does not constitute marketing consent. Where marketing has been explicitly authorised, the confirmation may include a preference/opt-out link.

5. Cookie-choice records

Cookie decisions are stored with a random identifier, policy version, categories, timestamp, language and pseudonymous technical hashes. The preference cookie lasts up to 365 days; consent events are retained for up to 36 months for compliance and traceability.

6. First-party web analytics

When Analytics is accepted, SERVIBIT processes first-party usage data in its own infrastructure to understand pages and sections viewed, active time, scroll depth, semantic clicks, language, device/browser/OS and contact conversion. No advertising profile or cross-site tracking is created.

When Analytics is accepted, the full IP address is stored in SERVIBIT's local analytics SQLite database together with a pseudonymous HMAC and a truncated network prefix; a local GeoIP source may also derive approximate country/region/city. The full IP is protected at database level and is neither displayed nor exported by Admin Review, which exposes only the minimised network prefix (/24 for IPv4 or /48 for IPv6 unless configured otherwise). The full User-Agent is not persisted by default. Analytics sessions and events are retained for up to 13 months by default and are deleted automatically. Withdrawing analytics consent stops collection and removes analytics identifiers from the browser.

7. Retention

Non-contractual contact requests are normally retained for 12 months from the last interaction. Technical and security logs are normally limited to 90 days unless an incident or legal obligation justifies longer retention.

8. Recipients and transfers

Hosting, infrastructure, email, backup or support providers may process data under appropriate contractual safeguards. International transfers, if any, will require a valid Chapter V GDPR mechanism.

9. Rights

Where applicable, you may exercise access, rectification, erasure, objection, restriction and portability rights, and withdraw consent at any time, by contacting contacto@servibit.es. You may also complain to the Spanish Data Protection Agency (AEPD).

10. Automated decisions and security

This website does not make automated decisions with legal or similarly significant effects and does not perform advertising profiling. Security measures include TLS, credential segregation, hashed passwords, access control, validation and protected local storage.

11. Updates

This policy is reviewed when purposes, technology, providers, legal bases or applicable law change. Material changes result in a new version and effective date.