Privacy policy

1. Data controller

The data controller is Oleksii Hruntenko, operating under the Enlanc.es brand. Privacy questions and rights requests may be sent to info@enlanc.es.

2. Data we may process

The website does not provide user accounts and does not directly store the message entered in the contact form: submitting it opens the email application selected by the user. Data may nevertheless be processed when a message is received or the technical infrastructure is used.

• Contact and project information voluntarily provided by email, messaging applications or telephone.
• Professional information required to prepare a proposal, answer a request or perform a contract.
• Minimum technical and security data such as IP address, date, requested resource, user agent and server logs.
• Language preference and cookie choice stored in first-party cookies.
• Statistical browsing information only when analytics consent has been given and the service is configured.

3. Purposes and legal bases

• Responding to enquiries, preparing quotations and taking requested pre-contractual steps.
• Managing contracts, projects, billing, support and communications required to provide services.
• Protecting the website, preventing abuse, diagnosing faults and maintaining infrastructure on the basis of the legitimate interest in security and service continuity.
• Complying with legal, accounting and tax duties or valid requests from authorities.
• Measuring website use through optional analytics solely on the basis of consent, which may be withdrawn at any time.

4. Recipients and international transfers

Data may be processed by providers required for hosting, email, security, communications, professional advice or technical support, subject to appropriate agreements and safeguards. Personal data is not sold.

If Google Analytics is enabled after consent, Google may act as an independent provider or processor depending on the configuration. Where a provider processes data outside the European Economic Area, the mechanisms and safeguards required by applicable law will be used.

5. Retention periods

Enquiries are retained for the time required to answer them and carry out reasonable follow-up. Contract, accounting and tax information is kept for the legally required periods. Technical logs are retained for limited periods consistent with security, diagnostics and fraud prevention.

Consent-based processing continues until consent is withdrawn, without affecting the lawfulness of processing carried out before withdrawal.

6. Individual rights

Where applicable, you may request access, rectification, erasure, objection, restriction and portability, and you may withdraw consent. A request must allow reasonable identity verification and identify the right being exercised.

You may also lodge a complaint with the Spanish Data Protection Agency or another competent supervisory authority.

7. Security, children and automated decisions

Reasonable technical and organisational measures are used according to the risk, although no Internet-connected system can guarantee absolute security.

The website is not intended for children to contract services independently and does not use automated decisions producing legal effects on users. If personal data submitted improperly by a child is identified, steps will be taken to remove it.

8. Changes to this policy

This policy may be updated because of legal, technical or service changes. The date of the current version is shown at the top of the page. Material changes will be highlighted by reasonable means.