Privacy policy

1. Data controller

• Controller: [TO COMPLETE: company name or name of the owner] (Pion Digital)
• Tax ID: [TO COMPLETE: tax identification number]
• Address: [TO COMPLETE: registered address]
• Privacy contact: support@piondigital.com

2. What data we process

When you fill in a contact or quote request form, we process the data you give us: name, email, company, phone (optional), website (optional), services of interest, approximate budget, timeline and the message you write. We also record the page from which you sent the form, the website language and, if you arrived from a campaign, its parameters (for example utm_source or gclid).

To prevent abuse we store an encrypted identifier (hash) of your IP address, never the address itself. We do not ask for special category data and ask you not to include it in your message.

3. Purposes and legal basis

• Replying to your request and, if you ask, preparing a proposal: legal basis, taking pre-contractual steps at your request (art. 6.1.b GDPR) and your consent when you send the form (art. 6.1.a GDPR).
• Managing the business relationship if we end up working together: performance of the contract (art. 6.1.b GDPR).
• Protecting the website against abuse (spam, automated submissions): legitimate interest (art. 6.1.f GDPR).
• Analytics and campaign measurement, only if you accept them in the cookie notice: consent (art. 6.1.a GDPR and art. 22.2 LSSI-CE).

We do not send marketing communications without your consent and we do not make automated decisions with legal effects on you.

4. Retention period

We keep the data of requests that do not become clients for a maximum of 2 years from the last contact; after that, it is automatically anonymised. If you become a client, we will keep it for the duration of the relationship and then for the applicable legal periods (for example, tax obligations).

5. Recipients and processors

We do not share your data with third parties unless legally required. To provide the service we use providers acting as data processors:

• Web hosting and database: [TO COMPLETE: hosting provider and server location]
• Email notifications: [TO COMPLETE: transactional email provider]

Some of these providers may process data outside the European Economic Area. In that case, the transfer relies on adequacy decisions of the European Commission or on standard contractual clauses. [TO COMPLETE: review and specify international data transfers]

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to support@piondigital.com and stating which right you wish to exercise. We will reply within one month at the latest.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the data protection authority of your country.

7. Security

We apply appropriate technical and organisational measures: encrypted connection (HTTPS), restricted and authenticated access to the management panel, logging of sensitive actions and minimisation of the data we collect.

Last updated: October 2026 · version 2026-10