Privacy Policy

Please take a few minutes to read the Privacy Policy of this website, in which we explain in a simple, clear and transparent manner how we process and protect your personal information and your rights under the GDPR and the LOPDGDD.

1. Data Controller

In compliance with Article 10 of Law 34/2002 (LSSI-CE), we hereby identify the controller of this website:

• • Identity: Secra Solutions, S.L.
• • Tax ID (CIF): B21628037
• • Address: C/ Sirio, 58, portal 3, 3º A, 28938 Móstoles (Madrid, Spain)
• • Email: contacto@secra.es
• • CNAE 2009: 6202 Computer programming, consultancy and related activities

2. Information to the User

The processing of personal data is governed by the following principles:

• • Lawfulness — data is only collected for specific and legitimate purposes.
• • Purpose limitation — data is used solely for the declared purposes.
• • Data minimization — only strictly necessary data is collected.
• • Accuracy — data is kept up to date with the cooperation of the data subject.
• • Storage limitation — data is retained as long as necessary and subsequently blocked in accordance with legal deadlines.
• • Security — appropriate technical and organizational measures are applied to prevent unauthorized access or unlawful processing.

3. Types of Data and Origin

The only personal data collected through the web form are: full name, email address and phone number. We do not process data from other sources.

The user certifies that they are over 18 years of age. Parents or legal guardians must prevent minors from submitting data.

The data provided must be truthful and up to date. The user undertakes to communicate any changes.

4. Purposes of Processing

The controller may process personal data in order to:

• • Inform you about its professional services.
• • Respond to and manage quotation requests.

If the data were to be processed for a different purpose, the user will be informed in advance.

5. Legal Basis for Processing

Processing is based on Article 6(1)(a) of the GDPR — consent of the data subject. The user may withdraw consent at any time by sending an email to contacto@secra.es.

Before submitting the form, the user must accept the legal notice and the privacy policy.

6. Recipients and Data Transfers

Contact data provided by the user through the web form is processed by the controller and is not transferred to third parties for purposes other than those declared in this policy.

Should IT services requiring the involvement of collaborators be requested, the user will be informed in advance in order to obtain their consent.

Data shared with third-party technology providers: for B2B commercial prospecting and corporate traffic analysis, we share certain browsing data (IP address and technical device data) with Apollo.io Inc., a provider established outside the EEA, which enables identification of visiting organizations. This processing is based on the controller's legitimate interest (Art. 6(1)(f) GDPR) for B2B prospecting, and is subject to the contractual safeguards and Standard Contractual Clauses of the European Commission for international transfers. The user may object to this processing at any time by writing to contacto@secra.es or by rejecting the corresponding cookies in the consent banner. Additional information in Apollo.io's privacy policy: https://www.apollo.io/privacy-policy

7. Data Subject Rights

You have the right to access, rectify, erase, restrict processing, object, request portability and not be subject to automated decision-making.

To exercise these rights you must identify yourself by sending an email to contacto@secra.es.

If you believe your rights have been infringed, you may file a complaint with the Spanish Data Protection Agency: https://sedeagpd.gob.es/

8. Data Retention

• • If a contractual relationship is established, data will be retained for its duration and subsequently blocked for a maximum of SIX YEARS (Art. 30 of the Commercial Code).
• • If the quotation is not accepted, data will be deleted within 15 days.
• • If the data does not fit the profile of a potential client, it will be destroyed immediately.

9. Security and Confidentiality

• • Data is treated confidentially with appropriate security measures in place.
• • Information sent through the form travels under the user's responsibility. Once received, strict procedures are applied to prevent unauthorized access.
• • The controller selects providers under strict data protection criteria.

10. Privacy Policy Updates

This policy may be modified to adapt it to legislative, doctrinal, technical or organizational changes. Updates will be published on this website.

11. Dispute Resolution

Any dispute shall be submitted to the Courts and Tribunals of Madrid.

Last updated: April 2026