Privacy Policy
Last updated: 25 October 2026
This policy explains what personal data we process when you visit digitals.technology or contact us, why we use it and what rights you have.
Data controller
- Owner: Artem Starodubtsev, sole trader (autónomo) registered in Spain, trading as DIGITALS
- Tax ID (NIF): Z3780099P
- Address: Calle Ernest Lluch 11E, 39012 Santander (Cantabria), España
- Email: privacy@digitals.technology
What data we process
When you submit the contact form:
- your name and email address (required);
- company, phone number or messenger handle, services you are interested in and approximate budget (optional);
- the message you write.
Together with your enquiry we automatically store the site language, the page you sent it from, the referring page if your browser provides it, and the date and time. We do not store your IP address with the enquiry and do not keep visit logs containing IP addresses.
If you email us directly, we process your email address and the content of your message.
We do not use analytics, advertising or tracking tools. For cookies, see the Cookie Policy.
Why we use your data
- To reply to your enquiry and keep in touch about it.
- To send you an email confirming that we have received your enquiry.
- To prepare a proposal or estimate if you ask for one.
- If we work together, to manage the contract and meet our tax and accounting obligations.
We do not send marketing communications without your prior consent, we do not sell your data, and we do not make automated decisions or build profiles.
Legal basis
- Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR): replying to your enquiry and preparing a proposal.
- Performance of a contract (Art. 6(1)(b) GDPR), if we work together.
- Compliance with legal obligations (Art. 6(1)(c) GDPR): keeping tax and accounting records.
Optional form fields are processed only if you choose to fill them in.
How long we keep data
- Enquiries that do not lead to a contract: up to 24 months after the last contact, then deleted automatically.
- Enquiries identified as spam: deleted within 30 days.
- Clients: for the duration of the contract and then for the statutory retention periods (up to 6 years for business and accounting records).
- Backups: overwritten automatically; deleted data disappears from them within 14 days at most.
- The same periods apply to the copy of your enquiry in our CRM.
Who else has access
We do not share data with third parties unless required by law. To provide the service we use the following providers, who act as data processors under a contract compliant with Art. 28 GDPR:
- Hetzner Online GmbH (Germany): hosting of the website, the database with enquiries and its backups. Servers in Nuremberg (Germany, EU).
- Google Ireland Limited (Ireland): business email (Google Workspace), when you email us or we reply by email.
- Resend, Inc. (USA): sending the automatic emails about your enquiry (the notice to our team and the confirmation you receive). Emails are processed in its EU region (Ireland).
- HubSpot, Inc. (USA): managing enquiries and client relationships (CRM). Data is hosted in its EU data centre (Germany).
The domain uses Cloudflare, Inc. for DNS only: website traffic and form content do not pass through Cloudflare.
International transfers
The website and enquiries are hosted in the European Union. Google, Resend and HubSpot are US companies and may process data in the United States or allow access from there. Such transfers rely on the Standard Contractual Clauses approved by the European Commission and, for Google and HubSpot, also on the EU-U.S. Data Privacy Framework, under which they are certified.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time by writing to privacy@digitals.technology. We will reply within one month.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es
Security
The website runs over an encrypted connection only (HTTPS). Access to enquiries is restricted to the owner and protected by authentication, servers are located in the EU, and backups are made daily.
Children
Our services are intended for businesses and professionals. We do not knowingly collect data from children under 14.
Changes to this policy
We may update this policy when our services or providers change. The date of the last update is shown at the top of the document.
This document is available in Spanish, English and Russian. In case of any discrepancy, the Spanish version prevails.