Privacy Policy
Last updated: March 2026
1. Data controller
- Identity: Databay Solutions S.L.
- Tax ID (NIF): B75779330
- Address: Avenida Molière, 18-B, Office 1, 29004 Málaga, Spain
- Contact email: info@databay.solutions
- Phone: +34 606 219 111
2. Personal data we collect
We collect personal data that you voluntarily provide through our contact forms:
- Project form: name, email, phone, company, project description and estimated budget.
- Job application form: name, email, LinkedIn profile, CV/portfolio URL and professional description.
- Commercial proposal form: name, email, phone, company, proposal description and how you found us.
- Community questions form: name, email and question.
Additionally, we automatically collect browsing data for analytical purposes: pages visited during the session, referrer URL, UTM campaign parameters, user agent (browser), screen resolution and browser language. This data is associated with the contact form when the user submits it, for the purpose of internally analyzing marketing attribution and improving our services.
Partial forms: when you accept the privacy policy in a form but do not submit it, we may save the partial data entered up to that point in order to detect usability issues and improve the form experience. This data is automatically deleted after 30 days.
3. Purpose of processing
We process your data for the following purposes:
- Managing and responding to your contact, project, job or commercial proposal request.
- Internally analyzing the origin and browsing behavior of leads to improve our services and marketing campaigns.
- Sending you communications related exclusively to your request.
4. Legal basis for processing
- Consent: by submitting any of our forms and accepting this privacy policy, you give us your express consent for the processing of your data (Art. 6.1.a GDPR).
- Legitimate interest: internal navigation analysis and marketing attribution (Art. 6.1.f GDPR).
5. Data retention period
Personal data will be retained for the time necessary to fulfill the purpose for which it was collected, and in any case for the legally established period:
- Project leads and commercial proposals: maximum 24 months from the last interaction.
- Job applications: maximum 12 months.
- Partial forms not submitted: maximum 30 days.
- Community questions: as long as they are useful to the community, with a maximum of 24 months.
6. Data recipients
Your data will not be shared with third parties for their own purposes. To provide our services, data is processed by the following providers (data processors), with whom we maintain the contractual guarantees required by GDPR:
| Provider | Purpose | Location | Safeguards |
|---|---|---|---|
| Supabase Inc. | Database and authentication | EU (Frankfurt) / USA | Data Privacy Framework (DPF), Standard Contractual Clauses |
| Twilio Inc. (SendGrid) | Email notifications with contact form data | USA | Twilio standard DPA, Standard Contractual Clauses |
| Google LLC | Web analytics (Google Analytics) — only with consent | USA | DPF, Standard Contractual Clauses |
| Hotjar Ltd. | Behavior analysis (heatmaps) — only with consent | EU (Malta) | Within the EEA |
7. Data subject rights
You can exercise the following rights at any time by sending an email to info@databay.solutions:
- Access: obtain confirmation of whether we process your data and access it.
- Rectification: request correction of inaccurate data.
- Erasure: request deletion of your data when no longer necessary.
- Restriction: request restriction of processing in certain circumstances.
- Portability: receive your data in a structured, commonly used format.
- Objection: object to the processing of your data.
You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
8. Security measures
We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure or destruction, including encryption in transit (TLS/SSL), role-based access control and periodic security audits.
9. Cookies
This website uses cookies. For more information, see our Cookie Policy.
10. Changes
We reserve the right to modify this privacy policy to adapt it to legislative or jurisprudential developments. In case of significant changes, we will communicate them through this website.