Privacy policy

For what purposes do we process your personal data?

The contact, homepage and audit forms collect name and company, email and message; phone number and website are optional. Data is used to respond and prepare a requested proposal. Avoid sensitive data or unnecessary third-party details. Sending an enquiry does not subscribe you to advertising.

IONOS provides website hosting and manages the mailboxes. The server location, technical log data and retention periods still need confirmation.

What legal bases does KRANEO rely on to process your data?

Requests to enter a service contract may rely on steps taken at your request before a contract under GDPR Article 6(1)(b). For general enquiries, the form asks you to authorise processing to respond to your request under GDPR Article 6(1)(a). You can withdraw this authorisation through the privacy contact. No consent for advertising is requested. Where consent is used, it must be specific, demonstrable and withdrawable.

Where there is a legal obligation to retain or disclose particular data, that processing relies on GDPR Article 6(1)(c).

How long will we retain your personal data?

Your data will be retained for the minimum time necessary to provide the requested service, to address any liabilities arising from it and to meet any other legal requirements.

With whom do we share your data?

Hosting and the info@kraneo.es and hola@kraneo.es mailboxes are contracted with IONOS. The forms use Brevo SMTP to send requests to hola@kraneo.es. The legal and privacy contact is info@kraneo.es. The application does not save enquiries to a database or CRM. Emails include the form source, language, acceptance of the privacy notice, its version and the UTC receipt date. Contracted entities, server location, data processing agreements, subprocessors and any international transfers, destinations and safeguards must be checked. Data may also be disclosed to authorities where legally required.

What rights do you have as a data subject?

Access: find out whether we process your data and obtain information about the processing and a copy of your personal data.

Rectification: request correction of inaccurate data or completion of incomplete data.

Erasure: request deletion where legal requirements are met; some data may need to be retained to meet obligations or address claims.

Restriction: request limits on the use of your data in the circumstances provided by the GDPR.

Objection: object, on grounds relating to your particular situation, to processing based on legitimate interests or public interest where applicable.

Portability: receive data you provided in a structured, machine-readable format or request transfer to another controller where processing is automated and based on consent or a contract.

You may withdraw consent at any time without affecting the lawfulness of earlier processing.

To exercise your rights, email info@kraneo.es stating your request. We will only ask for additional identity information where necessary. Requests are generally free and we will respond within one month; if a lawful extension is needed, we will notify you within that first month.

You may complain to the competent authority: Portugal’s CNPD (www.cnpd.pt) or Spain’s AEPD (www.aepd.es).

Do we make automated decisions or update this policy?

The current contact endpoint sends an email and does not implement automated decisions with legal effects. Additional processing or profiling must be reviewed before activation. This policy will be updated as processing changes.