Privacy Policy

Last updated: 25 August 2026

1.- Owner and Data Controller

The owner of this website and controller of the personal data collected through it is GLOBAL DATA ANALITICA, S.L. (hereinafter, the «Service» or «Todoesdata»), with registered address at C/ Posada de Lluc 8 – Local 2, 07002 Palma de Mallorca (Balearic Islands, Spain).

E-mail: hola@todoesdata.com
Tax ID (NIF): B10578045

GLOBAL DATA ANALITICA, S.L. is registered with the Commercial Registry of the Balearic Islands (Palma de Mallorca), Volume 2963, Page 25, Sheet PM-94558, Entry 1.

Data protection officer. GLOBAL DATA ANALITICA, S.L. has appointed a data protection officer, whose appointment has been notified to the Spanish Data Protection Agency. You may contact the data protection officer regarding any matter concerning the processing of your personal data or the exercise of your rights, at dpd@todoesdata.com.

Use of the website confers the status of user and implies acceptance of these Terms of Use. The information on the processing of your personal data contained in section 7 and in our Cookie Policy is provided for information purposes, in compliance with Articles 12 and 13 of the GDPR.

1.2.- Acceptance

Acceptance of these Terms of Use is a necessary condition for using our website. These terms govern the use of the website and its functions from the effective date shown in the heading.

In processing your personal data, the Service complies with applicable legislation, in particular Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), together with their implementing rules.

2.- Description of the Service

The Service consists of the corporate and informational website of Todoesdata, a data science and data analytics consultancy, through which it presents its professional services —data and big data architecture, business intelligence, artificial intelligence and machine learning, training, and advice on the selection of management systems—, publishes content on these subjects, and makes contact channels available to users who wish to request information or a quotation.

The website is purely informational: no products or services are sold through it, there is no user registration or private area, and no newsletters are sent.

3.- External links

The website may link to other websites. We exercise no control over those sites or their content, which are subject to their own terms and conditions. Nor do we assume any association with or responsibility for them, and we do not guarantee their technical availability, quality, reliability, accuracy or truthfulness.

4.- Intellectual and Industrial Property

The content and information of the Service (including, among others, trade marks, logos, data, text, images and software code), as well as the hardware or software used to provide them, are owned by the Service or the Service holds the corresponding authorisations for their use.

Under national and European intellectual and industrial property law, the modification, reproduction, duplication, copying, distribution, sale, resale and any other form of commercial or equivalent exploitation of the Service and its content is prohibited. Any other use requires our prior written consent or, where applicable, that of the authors of the content.

5.- User Content

You may contribute to the Service by sending us messages to our e-mail address or through the contact form available on the website (hereinafter, the «Content»).

By sending it, you grant us a non-exclusive, royalty-free licence over that Content, limited to the purposes of handling your communication and improving and promoting the Service, allowing us to display it on the website, reformat it, translate it and edit it for clarity or to correct errors. The licence subsists while the Content remains published and terminates when you request its removal, without prejudice to backup copies required by law. The Content remains yours.

The Service reserves the right not to publish content that is false or contrary to the law or to third-party rights.

6.- Age

Use of the website and its contact channels is permitted from the age of 14 (Article 7 LOPDGDD). If you are under 14, please do not provide us with personal data: the consent of your parents or guardians will be required.

In any event, to enter into any contract with the Service you must be of legal age. You declare that the information you provide, before and during your use of the Service, is true, complete and accurate.

7.- Data protection

7.1.- Information collected

The personal and non-personal information collected will vary depending on how you use the website, and reaches us through three routes: 1) information collected automatically, 2) information you provide voluntarily, and 3) information provided by third parties or obtained from publicly accessible sources.

7.1.1.- Data collected automatically

Data collected through cookies or similar technologies, with your consent where such consent is required. See our Cookie Policy for further information.
The IP address from which the connection is made, the device type and its characteristics, the operating system version, the browser type, the language, the date, the country, the time of the request, the referring URL and the mobile network used, among others.
Site usage data and any errors detected during use.

7.1.2.- Data provided voluntarily

The information you enter in the contact form: first name, surname, e-mail address, job title and the content of your message.
Any personal information contained in messages you send us by e-mail, telephone or messaging.
Any documentation you send us if you apply for a position: your CV and the data it contains.

7.1.3.- Data provided by third parties or from publicly accessible sources

Data provided by social networks or similar services, under the terms of section 7.3.2.
Professional contact data —company, position or function and one contact detail— obtained from publicly accessible sources, under the terms and with the safeguards set out in section 7.3.4.

7.2.- Purposes, legal bases, retention periods and recipients

Processing	Purpose	Legal basis	Retention period	Recipients
Website administration	Maintain, secure and improve the Service	Legitimate interest (Art. 6(1)(f) GDPR)	While the website is active; technical logs: 12 months	Hosting and maintenance providers (processors)
Contact form protection	Prevent automated form submissions and abuse of the contact channel by distinguishing humans from automated systems	Legitimate interest (Art. 6(1)(f) GDPR), in its Service-security dimension	The term of the mechanism itself, stated in the Cookie Policy	Google Ireland Limited (processor), with onward transfer to Google LLC (USA)
Handling enquiries and quotation requests	Reply to your messages and requests and manage the pre-contractual stage	Pre-contractual measures at your request (Art. 6(1)(b) GDPR); residually, legitimate interest where the enquiry does not concern our services	12 months from the last interaction	E-mail and contact management providers (processors)
Analytics through cookies	Measure site usage on an aggregated basis	Your consent (Art. 22.2 LSSI and Art. 6(1)(a) GDPR)	The period of each cookie, as stated in the Cookie Policy	Providers identified in the Cookie Policy
Client relationship management	Enter into and perform the contract, issue invoices and collect payment	Performance of a contract (Art. 6(1)(b)) and legal obligation in accounting, tax and commercial matters (Art. 6(1)(c))	Duration of the relationship and, thereafter, the applicable statutory limitation periods	Tax authorities, banking institution, accounting firm (processor)
Business contact management	Maintain a record of the companies and individuals with whom a commercial relationship exists or has existed, and give continuity to that relationship	Legitimate interest (Art. 6(1)(f)), within the framework of Art. 19 LOPDGDD for professional contact data	3 years from the last effective interaction	Contact management provider (processor)
Commercial prospecting	Offer our professional services to companies that may be interested, by telephone contact	Legitimate interest (Art. 6(1)(f)), within the framework of Art. 19 LOPDGDD	12 months from the last contact without interaction; in the event of objection, immediate erasure, retaining only the minimum data necessary to honour it	Contact management provider (processor)
Commercial communications to clients	Inform you of our own services similar to those you have contracted	Legitimate interest (Art. 6(1)(f)) and Art. 21.2 LSSI	Until you object	Contact management provider (processor)
Security	Prevent and investigate unlawful use and cooperate with the authorities	Legitimate interest	12 months	Law enforcement authorities, where applicable
Recruitment	Assess your application for a specific position	Pre-contractual measures at your request (Art. 6(1)(b))	Until the selection process is concluded	—
Candidate pool	Consider your application in future processes	Your consent (Art. 6(1)(a))	1 year from collection, unless renewed by you	—
Handling of data subject requests	Process and evidence the handling of your requests	Legal obligation (Art. 6(1)(c))	3 years from the reply	—

Where the legal basis is legitimate interest, we have carried out the prior balancing test between our interest and your rights and freedoms; you may request further information about it through the contact channels.

The Service may use user information in the form of aggregated and anonymous data to produce and share statistics; none of this will allow you to be identified.

The Service does not take automated individual decisions producing legal effects concerning you or similarly significantly affecting you.

7.3.- Specific processing activities

7.3.1.- Contact form and e-mail

The website uses TLS encryption allowing your data to be sent securely through the contact form. The data collected is incorporated into the processing activities documented in our record of processing activities (Art. 30 GDPR). We will receive your IP address, which we use to verify the origin of the message and detect possible irregularities (for example, automated submission attempts or cyberattacks), together with data relating to your access provider.

The form also incorporates a service protecting against automated submission (reCAPTCHA, by Google), necessary to preserve the security and operation of the very form you have asked to use. That service receives your IP address and data about your interaction with the page. Further detail is available in our Cookie Policy.

7.3.2.- Social networks

We maintain profiles on some of the main social networks, in particular LinkedIn and Instagram. As regards page visit statistics and other processing linked to those pages, the Service and the social network act as joint controllers on the terms declared by each platform (CJEU judgment of 5 June 2018, Case C-210/16); their joint controllership arrangements can be consulted on the social network itself. As regards the content we publish, the Service is the controller.

We may inform our followers, through the channels the social network allows, about our activities or offers, and provide customer support through those channels. We do not extract data from social networks for commercial purposes. Where the exercise of your rights depends on changes to your profile, we will assist you as far as we are able.

7.3.3.- Job offers

We will only assess applications for employment or internships submitted through the means indicated in the relevant offer; others will be rejected and deleted.

We will analyse solely the documentation you send us, the information you disclose in any assessments and interview and, where applicable, your profile on professional social networks, limiting ourselves to data relevant to assessing your application for the position (Art. 5(1)(c) GDPR). You do not need to provide us with health data, criminal records or your full employment history: if you send them, we will delete them.

If you are not selected, we will delete your application once the process closes, unless you expressly authorise us to retain it for future openings, in which case we will keep it for one year from your authorisation. You may withdraw that authorisation at any time.

7.3.4.- Commercial prospecting and professional contact data

Our activity is business to business. To offer our services we may contact by telephone those persons who, within an organisation, are responsible for decisions on data analysis and management.

In such a case we inform you of the following:

We process exclusively professional contact data: the company name, your position or function and one contact detail in your professional capacity, together with the source from which we obtained them. We do not build profiles about you or enrich that data with information from other sources.
The source of the data will be indicated to you during the call itself (Art. 14(2)(f) GDPR). This is publicly accessible professional contact data, published for contact purposes by the organisation to which you belong.
The legal basis is our legitimate interest in the commercial promotion of services related to your professional activity, within the framework of Art. 19 LOPDGDD.
Before each campaign we consult the advertising exclusion systems provided for in Art. 23 LOPDGDD. (Do not publish this bullet until the consultation and the objections register are in place: items C23 and C24.)
You may object at any time, including during the call itself, without giving reasons and free of charge. If you do, we will not contact you again: we will retain only the minimum data strictly necessary to honour your objection permanently.
We do not send commercial communications by e-mail to non-clients without their prior consent. If during the call you authorise us to send you information, we will record that authorisation with its date and content.

If you are a client, we may inform you electronically about our services similar to those you have contracted, under Art. 21.2 LSSI, offering you in every communication a simple and free means of objecting.

7.4.- Your rights

Completing the forms is voluntary; however, if you do not complete the fields marked as mandatory, some site functions will not be available.

You may exercise at any time your rights of access, rectification, erasure, restriction of processing, objection and portability, free of charge, by e-mail to hola@todoesdata.com or dpd@todoesdata.com, or by post to C/ Posada de Lluc 8 – Local 2, 07002 Palma de Mallorca, Spain. We will reply within a maximum of one month from receipt of the request (Art. 12(3) GDPR), extendable by a further two months in cases of particular complexity, in which case we would inform you within the first month.

To process your request we will ask you for the data necessary to locate you within our processing activities. Only if there are reasonable doubts as to your identity will we request additional information to confirm it (Art. 12(6) GDPR): we do not require a copy of your identity document by default.

If you have given consent for a specific purpose, you have the right to withdraw it at any time, without affecting the lawfulness of processing carried out before its withdrawal. In the case of cookies, you may do so from the settings panel that is permanently accessible on the website.

If you consider that we have not processed your data in accordance with the applicable rules, you may lodge a complaint with the Spanish Data Protection Agency (AEPD; electronic office: sedeagpd.gob.es), without prejudice to contacting us first.

8.- Service providers

Third parties manage part of the Service on behalf of the controller (for example, web hosting, e-mail, analytics, cookie consent management or business contact management). They act as data processors, subject to the data processing terms each of them has entered into or published, access only the information necessary to perform their functions, and may not use it for any other purpose.

Some of these providers may process data outside the European Economic Area. In that case, the transfer relies on an adequacy decision of the European Commission —such as the EU-US Data Privacy Framework, approved by Decision of 10 July 2023, where the provider is certified— or on the appropriate safeguards of Articles 46 et seq. GDPR, in particular the standard contractual clauses of Decision (EU) 2021/914. You may request information on the instrument applicable to each provider through the contact channels.

The Service may also disclose data to the competent authorities where reasonably necessary to comply with a legal obligation or a request; in such a case, only the strictly required information.

9.- Liability

To the fullest extent permitted by law, the Service is not liable for: a) errors or omissions in the content; b) unavailability of the website; or c) the transmission of malicious software through the content, notwithstanding the reasonable technological measures adopted to prevent it.

10.- Amendments

The Service reserves the right to make such modifications as it deems appropriate to its website, and may change, remove or add content and services, as well as the way they are presented.

These terms may be updated. If the change is substantial —in particular, if it affects the information on the processing of your data— we will announce it with reasonable notice by means of a prominent notice on the website. Amendments take effect from their publication.

11.- Cookies

Please see our Cookie Policy to learn how we use cookies and how to configure them or withdraw your consent.

12.- Security measures

The Service applies the technical and organisational measures appropriate to the risk of the processing (Art. 32 GDPR) to protect the security, integrity and confidentiality of the information collected against unauthorised access and against accidental alteration, loss or destruction.

In any event, no system is infallible, so we ask for your cooperation and prudence regarding the information you share. You understand that, even after deletion, information may remain temporarily visible in caches or in copies made by other users.

13.- Contact

If you have any questions about these terms, please contact us at:

E-mail: hola@todoesdata.com
Address: C/ Posada de Lluc 8 – Local 2, 07002 Palma de Mallorca (Balearic Islands, Spain)

14.- Governing version

These Terms of Use and Privacy are a translation provided for convenience. In the event of any discrepancy between this English version and the Spanish version published at todoesdata.com/politica-de-privacidad, the Spanish version shall prevail. The relationship is governed by Spanish law.