Section 01
Privacy Policy
Last updated: 23 July 2026
1. Data Controller
The data controller responsible for processing your personal data is LumetricCoreSystems, located at Calle de Segovia 18, Madrid, Centro, España, España. For any inquiries regarding data processing, you may contact us at [email protected].
2. Data We Collect
In the course of providing web agency services, we collect and process the following categories of personal data: identification data (name, email address, phone number), project-related data (business specifications, creative assets, technical requirements), payment information (billing address, transaction records), and usage data (IP address, browser type, interaction patterns on our digital properties).
3. Legal Basis for Processing
We process personal data under the following legal bases as defined in Article 6 of the GDPR: (a) performance of a contract to which the data subject is party, (b) compliance with a legal obligation, (c) legitimate interests pursued by the data controller, and (d) explicit consent of the data subject.
4. Data Retention
Personal data is retained only for the duration necessary to fulfill the purposes for which it was collected. Project-related data is retained for a maximum of 5 years following the completion of the contractual relationship. Financial records are retained for 10 years in compliance with Spanish tax legislation.
5. Data Sharing
We do not sell, rent, or trade personal data to third parties. Data may be shared with: hosting providers and CDN services essential to service delivery, payment processors for transaction facilitation, and analytics providers operating under strict data processing agreements in compliance with GDPR Article 28.
6. International Transfers
Where personal data is transferred outside the European Economic Area, we ensure adequate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, or reliance on adequacy decisions as defined under GDPR Chapter V.
7. Your Rights
Under the GDPR, you have the right to: access your personal data (Article 15), rectification of inaccurate data (Article 16), erasure of personal data (Article 17), restriction of processing (Article 18), data portability (Article 20), and the right to object to processing (Article 21). You also have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
8. Supervisory Authority
You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es if you believe your data protection rights have been infringed.