Sazatek Digital
ES / CAT / EN
Let's talk

Privacy policy

What personal data we collect through this website, what we use it for, how long we keep it, and how you can exercise your rights. Information provided in accordance with Articles 13 and 14 of Regulation (EU) 2016/679.

1. Data controller

  • Controller: Sazatek Digital, S.L.
  • Tax ID: B66640061
  • Contact email for data protection matters: info@sazatek.com

Given the volume and nature of the processing we carry out, we are not required to appoint a data protection officer under Article 37 of the GDPR. Privacy queries are handled at the address above.

2. What data we process

We only process the data you provide voluntarily. We do not collect browsing data for advertising purposes or build profiles.

Contact form

Full name, email, company, role and the content of your query. If you write to us directly by email, we also process the email address you contact us from and any data you include in the message.

Server technical logs

Our hosting provider keeps access logs that may include the IP address, date and time of the request, and the browser used. These are necessary for the service's operation and security.

Web analytics

If you give us your consent in the cookie banner, we use Google Analytics to understand in aggregate how the site is used. We do not use this information to identify you individually or cross-reference it with other data about you.

We don't use advertising or social-media cookies, and we don't load resources from third-party servers except Google Analytics (active only with your consent). See the full detail in the cookie policy.

3. What we use it for and on what legal basis

Answering your query and preparing a possible proposal

We use the data from the form or email to respond to you, assess whether we can help, and, where relevant, draft a services proposal.

Legal basis: pre-contractual measures at the data subject's request (Art. 6.1.b GDPR). When the query isn't aimed at contracting, processing relies on our legitimate interest in handling the communications we receive (Art. 6.1.f GDPR).

Managing the contractual relationship

If we end up working together, we process the data needed to perform the contract, invoice, and meet our obligations.

Legal basis: performance of the contract (Art. 6.1.b GDPR) and compliance with legal obligations in tax and accounting matters (Art. 6.1.c GDPR).

Keeping the site secure

Server logs are used to detect incidents and prevent abusive use.

Legal basis: legitimate interest in guaranteeing the security of our systems (Art. 6.1.f GDPR).

4. How long we keep the data

  • Queries that don't lead to a contract: up to twelve months from the last contact, after which they are deleted.
  • Clients: for the duration of the contractual relationship and, afterwards, for the legal limitation periods — six years for commercial and accounting matters (Art. 30 of the Commercial Code) and four for tax matters (Art. 66 of the General Tax Law).
  • Server logs: whatever period our hosting provider sets, in any case limited to what's necessary for its purpose.

5. Who we share data with

We don't sell or transfer personal data to third parties for commercial purposes. Only the providers we need to operate access it, as data processors under a contract signed in accordance with Article 28 of the GDPR:

  • Web hosting provider.
  • Corporate email provider.
  • Tax and accounting advisory, where there is a contractual relationship and it is necessary for invoicing.
  • Google Ireland Limited (Google Analytics), only if you accept analytics cookies.

Data may also be shared with public authorities, judges and courts where there is a legal obligation to do so.

6. International transfers

Our providers operate from the European Economic Area. Google Analytics may transfer data to servers in the United States; Google relies on the European Commission's standard contractual clauses as a safeguard for these transfers. Should any other provider in the future involve a transfer outside the EEA, it will be carried out under a European Commission adequacy decision or the safeguards set out in Chapter V of the GDPR, and this will be disclosed in this policy.

7. Your rights

You may exercise the following rights at any time:

  • Access: know what data of yours we process.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: request deletion once it is no longer needed.
  • Restriction: request that we suspend processing while a claim is resolved.
  • Portability: receive the data in a structured, commonly used format.
  • Objection: object to processing based on our legitimate interest.

To exercise them, write to us at info@sazatek.com indicating which right you wish to exercise. We will respond within one month of receiving the request, extendable by two further months if the request is particularly complex. Exercising these rights is free of charge.

If you believe we have not properly handled your request, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid — www.aepd.es), without prejudice to any other administrative or judicial remedy.

8. Information security

We apply appropriate technical and organizational measures to protect data against destruction, loss, alteration or unauthorized access, taking into account the state of the art and the risks of processing. The site is served over an encrypted connection and access to data is limited to staff who need it for their work.

9. Minors

Sazatek's services are aimed at businesses and professionals. We do not knowingly collect data from children under fourteen. If we detect that such data has been provided, we will delete it.

10. Changes to this policy

We may update this policy to reflect regulatory changes or changes in our processing activities. The version in force will always be the one published on this page, with the update date shown at the bottom. If a change substantially affects your rights and we hold your contact details, we will notify you.

Last updated: 31 July 2026.