1. Data controller
- Data controller: Santiago Couto, Tax ID (NIF) 04764755Y, trading as INOBERICA – Innovative Business Development
- Address: Ollerías Bajas, 7 – 6º Dcha., 48006 Bilbao (Bizkaia), Spain
- Privacy contact: info@inoberica.com
- Data Protection Officer: none has been appointed, as the law does not require one for this type of activity.
2. What data we process, why, and on what legal basis
| Processing | Data | Purpose | Legal basis | Retention period |
|---|---|---|---|---|
| Contact form and email | Full name, work email, company, role (optional), your situation, the content of your message and how you heard about us | Responding to your enquiry and, where appropriate, sending you a proposal | Your consent when submitting the form (Art. 6(1)(a) GDPR) and taking steps prior to entering into a contract (Art. 6(1)(b)) | Until your enquiry is resolved and, if no business relationship follows, 12 months. Enquiries sent through the form are received at info@inoberica.com. To ensure correct delivery, a technical copy of the submission may be kept temporarily (for a maximum of 14 days); it is deleted automatically once it has served its purpose. |
| Business and contractual relationship | Contact and billing details of the company and its representatives | Providing the contracted service and meeting tax and commercial obligations | Performance of a contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)) | For the duration of the contract and, afterwards, for as long as the law requires (6 years) |
| B2B commercial communications | Name, role, company and work email | Informing you about services similar to those you have already contracted or requested | Legitimate interest (Art. 6(1)(f) GDPR and Art. 21.2 LSSI-CE) or your consent | Until you object or withdraw your consent |
| Web analytics | Browsing data collected through cookies (identifier, pages viewed, device) | Measuring use of the website to improve it | Your consent (Art. 6(1)(a) GDPR and Art. 22.2 LSSI-CE), which you can withdraw at any time | The lifetime of the cookies (see Cookie Policy) |
No automated decisions are made and no profiles are built from your data. Form fields marked with an asterisk are required; without them we cannot handle your request.
3. Who we share your data with
We do not sell your data. It is only shared with providers of necessary services, with whom we have the data processing agreement required by Art. 28 GDPR:
- Microsoft Ireland Operations Ltd (Microsoft 365 business email).
- Raiola Networks, S.L. (web hosting).
- Google Ireland Ltd (Google Analytics, if you accept analytics cookies).
- Arsys Internet, S.L.U. (registration and management of the inoberica.com domain).
- Public authorities, banks and advisers, where required by law or necessary for the service.
4. International transfers
Google and Microsoft may process data in the United States. These transfers are covered by the European Commission’s adequacy decision for companies certified under the EU-US Data Privacy Framework or, failing that, by standard contractual clauses (Art. 46 GDPR). You can ask us for a copy of the safeguards.
5. Your rights
You can access, rectify or erase your data, object to its processing, request its restriction and portability, and withdraw your consent at any time without affecting processing already carried out. To exercise these rights, write to info@inoberica.com stating the right you wish to exercise and enclosing a copy of your identity document. We reply within one month.
If you believe we have not processed your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es; C/ Jorge Juan, 6, 28001 Madrid).
6. Source of the data
You provide the data yourself when you write to us or contract our services.
7. Security
We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration, such as encrypted communications (HTTPS), access control and backups.
8. Minors
This website is aimed at companies and professionals. We do not knowingly process data of children under 14.
9. Changes to this policy
We may update this policy to reflect legal or service changes. The version in force is the one published at any given time.
Last updated: 5 November 2026.