01
Legal

Privacy Policy

This Privacy Policy explains how Pulsesphere SL (“we”, “us”, or “our”) collects, uses, stores, and protects personal data when you visit pulsesphere-sl.com, contact us, or engage with our IT marketing services. We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR), the Spanish Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights (LOPDGDD), and applicable EU ePrivacy rules.

1. Data Controller

The data controller responsible for your personal data is:

Pulsesphere SL
C/ Pinta, 9 21810
(Palos De La Frontera), Huelva, Spain
Email: info@pulsesphere-sl.com
Website: https://pulsesphere-sl.com

We have not appointed a Data Protection Officer (DPO). For any privacy-related enquiry, please contact us using the details above.

2. Scope of This Policy

This policy applies to personal data we process when you:

  • Visit or interact with our website.
  • Contact us by email, contact form, or other communication channels.
  • Subscribe to or receive marketing communications from us (where permitted).
  • Engage with us as a client, prospective client, supplier, or business partner.

This policy does not apply to third-party websites or services linked from our site. Those services are governed by their own privacy policies.

3. Categories of Personal Data We Collect

Depending on how you interact with us, we may process the following categories of data:

  • Identity and contact data — name, job title, company name, email address, telephone number, and postal address.
  • Communication data — messages, enquiries, meeting notes, and correspondence you send to us.
  • Technical and usage data — IP address, browser type and version, operating system, device identifiers, referral URLs, pages viewed, session duration, and interaction events.
  • Cookie and preference data — cookie identifiers, consent choices, and site preference settings.
  • Marketing and analytics data — campaign interaction data, traffic source information, and aggregated website performance metrics (where you have consented to non-essential cookies).
  • Contract and billing data — information necessary to prepare proposals, agreements, invoicing, and service delivery (where applicable).

We do not intentionally collect special categories of personal data (such as health data or data revealing racial or ethnic origin) through our website. Please do not send us such information unless strictly necessary and you have a lawful basis to share it.

4. Sources of Personal Data

We obtain personal data from:

  • You directly — when you fill in forms, send emails, or communicate with us.
  • Automated technologies — cookies, server logs, and similar tools when you browse our website.
  • Publicly available sources — such as company websites or professional profiles, where relevant to B2B communications.
  • Service providers — where they provide analytics, hosting, or communication tools on our behalf.

5. Purposes and Legal Bases for Processing

Under Article 6 GDPR, we process personal data only where we have a valid legal basis. The table below describes our main processing activities:

  • Website operation and security — to deliver the site, prevent abuse, and maintain security.
    Legal basis: legitimate interests (Art. 6(1)(f) GDPR) and, where applicable, legal obligation.
  • Responding to enquiries — to answer questions and provide information about our services.
    Legal basis: pre-contractual steps or contract (Art. 6(1)(b) GDPR) and legitimate interests.
  • Service delivery — to perform contracts and manage client relationships.
    Legal basis: contract (Art. 6(1)(b) GDPR) and legal obligation.
  • Analytics and website improvement — to understand how visitors use our site and improve content and performance.
    Legal basis: consent (Art. 6(1)(a) GDPR) for non-essential cookies and tracking technologies.
  • Marketing communications — to send relevant updates about our services where permitted.
    Legal basis: consent (Art. 6(1)(a) GDPR) or legitimate interests for B2B communications where allowed by law, including the ePrivacy rules and LOPDGDD.
  • Legal and regulatory compliance — to comply with tax, accounting, and other legal obligations.
    Legal basis: legal obligation (Art. 6(1)(c) GDPR).

Where we rely on legitimate interests, we balance our interests against your rights and expectations. You may object to processing based on legitimate interests as described in Section 12.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies in accordance with Directive 2002/58/EC (ePrivacy Directive) as transposed into Spanish law and with GDPR requirements for consent.

Types of cookies we use:

  • Strictly necessary cookies — required for core website functionality, security, and storing your cookie preference. These do not require consent.
  • Analytics cookies — help us measure traffic and understand how visitors interact with the site. These are placed only if you select “Full” in our cookie banner.
  • Experience cookies — support personalization and improved user experience. These are also used only with your consent.

You can manage your preferences at any time through the cookie banner displayed on our website. You may also configure your browser to block or delete cookies; note that blocking strictly necessary cookies may affect site functionality.

7. Automated Decision-Making and Profiling

We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.

8. Recipients and Processors

We do not sell your personal data. We may share personal data with the following categories of recipients:

  • Service providers (processors) — hosting providers, email services, analytics tools, IT support, and professional advisers who process data on our documented instructions and under data processing agreements where required by Article 28 GDPR.
  • Professional advisers — lawyers, accountants, or auditors where necessary for our legitimate business interests or legal obligations.
  • Public authorities — courts, regulators, or law enforcement when required by applicable law.

We require processors to implement appropriate security measures and process personal data only for specified purposes.

9. International Transfers

We primarily store and process data within the European Economic Area (EEA). If personal data is transferred outside the EEA, we ensure a level of protection equivalent to that guaranteed within the EU by using one or more of the following mechanisms:

  • An adequacy decision adopted by the European Commission under Article 45 GDPR.
  • Standard Contractual Clauses (SCCs) approved by the European Commission under Article 46 GDPR.
  • Other appropriate safeguards permitted under Chapter V GDPR.

You may request further information about international transfers and copies of relevant safeguards by contacting us.

10. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

  • Enquiry and contact data — typically up to 24 months after our last interaction, unless a longer period is needed for contract discussions or legal claims.
  • Client and contract data — for the duration of the contractual relationship and thereafter as required by Spanish commercial, tax, and accounting law (generally up to 6 years for accounting records under Spanish legislation).
  • Marketing data — until you withdraw consent or object, or after a reasonable inactivity period where permitted by law.
  • Technical logs — for a limited period necessary for security and troubleshooting, usually not exceeding 12 months unless required for incident investigation.
  • Cookie consent records — retained as necessary to demonstrate compliance with consent requirements.

When data is no longer required, we securely delete or anonymize it.

11. Data Security

In accordance with Article 32 GDPR, we implement appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures may include access controls, encryption where appropriate, secure hosting environments, and staff confidentiality obligations.

While we take security seriously, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

12. Your Rights Under the GDPR

If you are in the EEA or Spain, you have the following rights in relation to your personal data, subject to conditions and exceptions under applicable law:

  • Right of access (Art. 15) — to obtain confirmation of whether we process your data and receive a copy.
  • Right to rectification (Art. 16) — to request correction of inaccurate or incomplete data.
  • Right to erasure (Art. 17) — to request deletion in certain circumstances (“right to be forgotten”).
  • Right to restriction (Art. 18) — to request limitation of processing in specific situations.
  • Right to data portability (Art. 20) — to receive data you provided in a structured, commonly used, machine-readable format where processing is based on consent or contract and carried out by automated means.
  • Right to object (Art. 21) — to object to processing based on legitimate interests or to processing for direct marketing at any time.
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
  • Rights related to automated decision-making (Art. 22) — not applicable as we do not conduct such processing (see Section 7).

To exercise your rights, email info@pulsesphere-sl.com. We will respond within one month of receipt, as required by Article 12 GDPR, which may be extended by a further two months where necessary due to complexity.

You also have the right to lodge a complaint with a supervisory authority. In Spain, the competent authority is the Agencia Española de Protección de Datos (AEPD): www.aepd.es. You may also complain to the supervisory authority in your country of residence or workplace within the EU.

13. Obligation to Provide Data

Where personal data is required to respond to an enquiry, enter into a contract, or comply with legal obligations, failure to provide such data may prevent us from providing the requested service or information. Other data is provided voluntarily.

14. Children’s Data

Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under 16 years of age. If you believe we have collected data from a child, please contact us and we will take steps to delete it promptly.

15. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or regulatory guidance. The revised version will be published on this page. Where changes materially affect your rights, we will provide additional notice where required by law.

16. Contact

For questions about this Privacy Policy or to exercise your data protection rights, contact:

Pulsesphere SL
C/ Pinta, 9 21810, (Palos De La Frontera), Huelva, Spain
info@pulsesphere-sl.com