Privacy policy
Last updated · 31 May 2026
Orientation-only base text generated from standard templates. Have it reviewed and adapted by a lawyer before onboarding real customers.
This policy explains how [TO FILL IN: Full legal name of the operator] ([TO FILL IN: Spanish NIF / CIF]) processes the personal data collected through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights (LOPDGDD).
1. Data controller
Identity: [TO FILL IN: Full legal name of the operator]
Tax ID (NIF/CIF): [TO FILL IN: Spanish NIF / CIF]
Registered address: [TO FILL IN: Full registered address]
Email: hola@teamcost.es
No Data Protection Officer has been appointed as this is not mandatory under Article 37 GDPR.
2. Data we collect
We collect the personal data you provide voluntarily through the contact form:
- Name
- Nursery name (optional)
- Message (optional)
Additionally, our hosting provider (Vercel Inc.) automatically logs technical browsing data (IP address, browser type, access date and time) for security and performance purposes, which cannot be used to identify you except in the event of a security incident.
3. Purpose of processing
We process your data to:
- Respond to enquiries you send via the contact form
- Send you the information about TeamCost that you request
- Comply with applicable legal obligations
We do not perform automated decision-making or profiling.
4. Legal basis
The legal basis for processing is your express consent when submitting the contact form (Art. 6.1.a GDPR). Where applicable, we may also rely on the operator's legitimate interest in responding to your enquiry (Art. 6.1.f GDPR).
5. Retention period
We will keep your data for the time necessary to handle your enquiry, and then for the period required to comply with applicable legal obligations (a maximum of 4 years under Spanish tax law). After that period, the data will be deleted or anonymised.
6. Recipients
Your data will not be shared with third parties except where required by law. To provide the service, we use the following data processors (third-party providers processing data on the controller's behalf):
- Vercel Inc. (USA) — website hosting and delivery. Certified under the EU–US Data Privacy Framework.
- Resend, Inc. (USA) — transactional email when you fill in the form. Certified under the EU–US Data Privacy Framework.
International transfers are made under the mechanisms set out in Arts. 44 et seq. GDPR.
7. Your rights
You may exercise the following rights over your personal data at any time:
- Access: know which data we hold about you.
- Rectification: correct inaccurate data.
- Erasure ('right to be forgotten'): delete your data when it is no longer necessary.
- Objection: object to the processing.
- Restriction: limit the processing in certain cases.
- Portability: receive your data in a structured format and transfer it to another controller.
- Withdraw your consent at any time, without affecting the lawfulness of prior processing.
To exercise them, write to hola@teamcost.es stating the right you wish to exercise and attaching a copy of an ID document.
You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) — www.aepd.es — if you consider that the processing does not comply with current regulations.
8. Security
We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration. The site is served over HTTPS with TLS encryption.
9. Changes to this policy
We may update this policy to reflect legal or operational changes. The date of the latest update is shown at the top of this document. We recommend you review this page periodically.