Privacy policy
What personal data we process through this website, why, for how long and how you can exercise your rights.
Data controller
- Controller: Fluxor Tech, S.L. (Fluxor Labs is a brand of the company)
- Tax ID (NIF): B26629600
- Registered address: C. Hermosilla 48, 1.º Dcha., 28001 Madrid (España)
- Privacy contact: contacto@fluxor-tech.com
- Data protection officer: none appointed.
What data we process
Only the data you give us in the forms and the minimum needed to serve and protect the website:
- Project request: name, email and project description; optionally, company, project type, current stage and approximate timeline.
- Investment and partnership: reason, name, email and message; optionally, organisation.
- General enquiry: name, email and message.
- In all three forms, the language of the page you write from.
- Form security: when you start filling in a form, Cloudflare Turnstile is loaded; it processes your IP address, TLS fingerprint, browser User-Agent and the site identifier. The number of submissions per IP address is also limited over 60 seconds.
- Technical connection data: IP address, date and time, requested page and browser type.
- Language preference: if you choose a language with the ES/EN switch, the
site_langcookie is stored. The country you visit from is only used at that moment to show you the site in Spanish or English; it is not stored.
We do not ask for special categories of data. Please do not include them in your messages.
Why we use it and on what legal basis
| Processing | Purpose | Legal basis |
|---|---|---|
| Project request | Reply to your request and, where appropriate, prepare a proposal. | Steps taken at your request prior to entering into a contract (art. 6(1)(b) GDPR). |
| Investment and partnership | Reply to your interest and continue the conversation by private email. | Steps taken at your request prior to entering into a contract (art. 6(1)(b) GDPR). |
| General enquiry | Read and answer your enquiry. | Legitimate interest in answering the enquiries we receive (art. 6(1)(f) GDPR). |
| Form security | Prevent automated and abusive submissions. | Legitimate interest in protecting the site and its users (art. 6(1)(f) GDPR). |
| Technical connection data | Serve the site, keep it available and protect it against attacks. | Legitimate interest in the security and operation of the site (art. 6(1)(f) GDPR). |
| Language preference | Show you the site in the language you have chosen. | Your express choice when using the language switch. |
We do not use your data for advertising, newsletters or marketing communications; we do not build profiles or make automated decisions, and we do not buy or share contact lists.
How long we keep it
- Form messages are not stored in the website’s database: they arrive by email in an internal mailbox. They are kept for as long as needed to handle your request and, if it leads to a professional relationship, while that relationship lasts and for the applicable statutory limitation periods.
- Submission-limit counters are discarded after 60 seconds.
- Technical connection data is kept for the limited period applied by our infrastructure provider to its logs.
- The
site_langcookie expires after 12 months or when you delete it.
Who else may access it
We do not share data with third parties unless required by law. We use the following providers, which act as data processors under a contract that guarantees the protection of the data:
- Cloudflare, Inc.: hosting, content delivery network, running the website and anti-spam verification (Turnstile).
- Plus Five Five, Inc. (“Resend”): sending the email with the content of the forms, only to deliver it.
For Turnstile, Cloudflare states that, in addition to providing the service as a processor, it processes those signals as a controller to improve its bot detection. More information in its Turnstile privacy addendum.
International transfers
Both providers are based in the United States, so international data transfers may take place. They are covered by their data processing agreements, the European Commission’s standard contractual clauses and their participation in the EU-U.S. Data Privacy Framework.
Your rights and how to exercise them
You can request access to, rectification or erasure of your data, object to its processing or request its restriction and portability, in the cases provided for by law.
Write to us at contacto@fluxor-tech.com or by post to Fluxor Tech, S.L., C. Hermosilla 48, 1.º Dcha., 28001 Madrid (España), stating the right you wish to exercise. We may ask you to prove your identity.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Security
- All traffic is encrypted with HTTPS.
- Forms are validated on the server and protected against automated submissions (honeypot field, submission limit and Turnstile).
- Technical logs do not include the content of the forms: no name, email or message.
- Service keys are stored as server secrets, never in the code or in the browser.
Minors
This website is intended for adults. If we receive data from a minor by mistake, we will delete it.
Changes to this policy
We may update this policy to reflect changes to the website or to the law. The date of the last update is shown at the end of the page. This policy is provided in Spanish and English; in the event of any discrepancy, the Spanish version prevails.