Privacy Policy

1. Data controller

In accordance with article 13 of Regulation (EU) 2016/679 (GDPR), we inform you that the controller of your personal data is:

• Company name: Edelwyss Solutions SL (single-member company)
• CIF (Spanish company tax ID): B26929554
• Registered office: Cl. Juan de Urbieta, 16, escalera A, 1º A, 28007 Madrid
• Email: info@mestria.es

2. Purpose of the processing

Your personal data is processed for the following purposes:

• To deal with and manage requests for information sent through the contact form.
• To process and answer requests for a demonstration of the MestrIA service.
• To contact you about the query or request you have made.

3. Legal basis for the processing

The legal basis for the processing is the consent of the data subject, under article 6(1)(a) GDPR. You give that consent when you fill in and send the contact form, and it is freely given, specific, informed and unambiguous.

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

4. Data collected

The contact form collects these details:

• Name (required)
• Company (required)
• Email address (required)
• Sector
• Document volume
• Message

The privacy checkbox records your consent; the language and anti-spam field help us process and protect your submission. Do not send client documents, sensitive data or children's data through this form.

5. Recipients of the data

The form uses Cloudflare Pages to process your request and Microsoft 365 to deliver it to info@mestria.es. The information you provide is included in the request email so that we can respond to you. You can request information about this processing at info@mestria.es.

For the delivery and storage of email we use Microsoft 365 (Microsoft Ireland Operations Ltd, Ireland) as a processor, subject to the GDPR and to the European Commission standard contractual clauses for any transfer that may occur outside the EEA.

The website is served through Cloudflare, Inc. as a content delivery network and reverse proxy. Cloudflare processes technical metadata for each visit (IP address, user agent, timestamp) for the sole purpose of providing the service, preventing abuse and keeping the site secure, under article 6(1)(f) GDPR (legitimate interest). Cloudflare adheres to the EU-U.S. Data Privacy Framework and signs standard contractual clauses. More information: Cloudflare privacy policy.

Bookings on /agenda/ use Calendly. The calendar connects only when you press the load button. The provider receives technical data and the details you submit to book. We process the booking to handle your request, on the basis of pre-contractual steps you request. Calendly acts as processor for booking data and its policy describes international transfers. See its privacy policy. You may also contact us by email.

Apart from the above, we do not pass your data to third parties except where the law requires it.

See providers and subprocessors by service →

6. Retention period

Data processed with your consent will be kept for as long as that consent remains valid and you have not asked for the data to be deleted. Data processed to take pre-contractual steps or comply with legal obligations will be kept for as long as necessary for those purposes. Once your request has been dealt with, the remaining data will be deleted unless a legal retention obligation or a legitimate interest justifies keeping it.

7. Rights of the data subject

You may exercise the rights granted by the GDPR at any time by writing to info@mestria.es:

• Access: Find out what personal data we hold about you.
• Rectification: Correct data that is inaccurate or incomplete.
• Erasure: Ask us to delete your data (the "right to be forgotten").
• Portability: Receive your data in a structured, commonly used format.
• Objection: Object to the processing of your data in certain circumstances.
• Restriction: Ask us to restrict the processing of your data.

We will request additional information to confirm your identity only if we have reasonable doubts about it.

8. Complaint to the AEPD

If you believe that the processing of your personal data does not comply with the rules in force, you have the right to lodge a complaint with the competent supervisory authority. In Spain that authority is the Agencia Española de Protección de Datos (AEPD, the Spanish data protection authority), through its electronic office at www.aepd.es.