Who this policy applies to
This policy applies to the public website used to present the company, describe service lines, publish legal information, receive contact requests and, where enabled, provide optional booking functionality.
It covers personal data collected directly from visitors, generated through normal technical operation of the site, or received from third-party services used to operate the public website.
Who controls the data
Daniel Castelló Yuste, operating publicly under the Softwapp brand and based in Spain, controls this public website. Its principal business address for this website is Calle Colón, 42, 2, 1, Moncada, Valencia 46113, Spain. For the purposes described in this policy, Daniel Castelló Yuste acts as the controller or business for the personal data processed through the public site, except where a service provider acts under its own independent privacy terms.
Categories of personal data we may process
Depending on the visitor interaction and enabled integrations, the public website may process the following categories of information:
- Identity and contact details submitted through the contact form, such as name, email address and company name.
- Inquiry context and message content, including the selected inquiry type and the substance of the message you send.
- Technical and device-related information required to deliver, secure and troubleshoot the website, such as IP-related security context, browser or device signals, and session-level request metadata.
- Language, consent and similar preference information when those controls are used on the site.
- Aggregated or pseudonymous usage information when optional analytics or tag-managed measurement is enabled in the applicable deployment.
Where the personal data comes from
Personal data covered by this policy may come directly from the visitor, automatically from the visitor browser or device during use of the website, or from service providers that support security, analytics, consent or booking functionality.
Why we may process personal data
The public website is designed to use personal data only for limited corporate and operational purposes, including:
- Receiving, reviewing and responding to business, service, licensing, partnership or general contact inquiries.
- Operating, maintaining and troubleshooting the website and its public pages.
- Protecting the website, contact form and infrastructure against spam, abuse, fraud, malicious traffic and unauthorized activity.
- Remembering language or consent-related choices during the visitor session or through the consent tooling when enabled.
- Measuring and improving website performance, content effectiveness and aggregate usage patterns where optional analytics are lawfully enabled.
- Meeting legal obligations, enforcing applicable terms, handling records and responding to lawful requests.
Legal bases for visitors in the EEA, UK and Switzerland
Where GDPR-style legal bases apply, the website operator may rely on different bases depending on the context of processing.
- Consent, for example where optional analytics or other non-essential cookie-based technologies are activated after a valid choice.
- Legitimate interests, for example to operate the website, answer corporate inquiries, secure the contact flow, prevent abuse, protect infrastructure and improve the public site in a proportionate way.
- Steps taken at the request of the visitor before entering into a business relationship or other requested engagement, where a visitor initiates a service, licensing or partnership inquiry.
- Compliance with legal obligations where retention, disclosure or response duties apply.
Cookies and similar technologies
Some personal data processing described in this policy takes place through cookies, local storage, tags or similar technologies. For more detail about those technologies, please review the Cookies Policy and the choices described there.
How personal data may be disclosed
Personal data from the public website may be disclosed only where relevant to the operation of the site or required by law. Categories of recipients may include:
- Internal personnel or representatives responsible for handling business inquiries, website operations or compliance matters.
- Hosting, infrastructure and application service providers that support the website environment.
- Resend is the configured email delivery transport used to route contact submissions to the internal contact channel.
- Cloudflare Turnstile for anti-spam and anti-abuse protection on the contact form.
- Silktide Consent Manager for recording and applying visitor consent preferences.
- Google Tag Manager for optional tag and measurement deployment.
- Advisers, authorities or counterparties where disclosure is necessary to comply with law, enforce rights or protect the website, company or others.
Additional notice for United States visitors
Depending on the law that applies, online identifiers, contact details, internet activity information and similar website-related data may qualify as personal information or personal data in the United States.
The current public website is not intended to sell personal information or to use advertising cookies for cross-context behavioral advertising. If future deployments introduce those activities, the site operator should provide the notices and opt-out mechanisms required by applicable state privacy laws.
International transfers
Softwapp is based in Spain and may use service providers that process personal data in other countries. Where personal data is transferred internationally, the operator should rely on the contractual, legal or technical safeguards that apply to the relevant transfer scenario.
Retention
Personal data is intended to be retained only for as long as reasonably necessary for the purpose for which it was collected, including handling inquiries, maintaining required records, resolving disputes, protecting the website and meeting legal obligations.
Exact retention periods may vary depending on the category of data, the live production configuration, the service provider involved, and any legal or operational requirement that applies at the time.
Privacy rights and choices
Depending on the visitor location and the law that applies, privacy rights may include:
- Access to personal data and information about how it is processed.
- Correction of inaccurate personal data.
- Deletion of personal data where deletion rights apply.
- Restriction of processing in certain circumstances.
- Data portability where provided by law.
- Objection to processing based on legitimate interests, where applicable.
- Withdrawal of consent for consent-based processing, without affecting the lawfulness of processing that occurred before withdrawal.
- For California residents, where applicable, rights may include the right to know, access, correct, delete and opt out of sale or sharing, as well as the right not to receive discriminatory treatment for exercising privacy rights.
- Requests can be initiated through the public contact channel described below.
Security
The website operator uses reasonable technical and organizational measures appropriate to the public website context to reduce the risk of unauthorized access, misuse, alteration or loss of personal data. No internet-based transmission or storage environment can be guaranteed to be completely secure.
Children and minors
This public website is not directed to children under 13 and is not designed to knowingly collect personal data from children for public marketing or profiling purposes. If the operator learns that personal data from a child has been collected in a way that requires action, the operator should review and delete that information where appropriate and consistent with applicable law.
Changes to this policy
The website operator may update this policy when the website architecture, service providers, legal requirements or operational practices change. The revision date shown on this page should be updated when a material change is published.
How to contact us about privacy
For privacy questions, rights requests or data protection concerns related to the public website, please use the Contact or review the Cookies Policy.
You may also contact Daniel Castelló Yuste at Calle Colón, 42, 2, 1, Moncada, Valencia 46113, Spain or by email at privacy@softwapp.com.