Privacy Policy

1. Data Controller

The data controller responsible for personal data collected through this website is:

Kredanorio
Address: Pl. la Constitución, 7, 41970 Santiponce, Sevilla, Spain
NIF: R32511498
Email: info@kredanorio.com
Phone: +34 854 788 104

2. Data We Collect

We may collect and process the following categories of personal data:

• Contact data: name and email address submitted through the contact form.
• Message content: the text of any enquiry you submit to us.
• Technical data: IP address, browser type, operating system, referring URL, pages visited, and time of visit — collected automatically via server logs and analytics tools.
• Cookie data: preferences and session data stored via cookies as described in our Cookie Policy.

We do not collect sensitive personal data (such as health, financial account, or biometric data) through this website.

3. Purposes and Legal Basis for Processing

We process your personal data for the following purposes and on the following legal bases under Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD):

• Responding to enquiries (Art. 6.1.b GDPR): processing is necessary to take steps at the request of the data subject prior to entering into a contract, or to fulfil a legitimate request for information.
• Website operation and security (Art. 6.1.f GDPR): our legitimate interest in maintaining the security and proper functioning of this website.
• Analytics and improvement (Art. 6.1.a GDPR): with your consent via cookie preferences, we may use analytics data to understand how visitors use the site and improve its content.
• Legal compliance (Art. 6.1.c GDPR): where processing is necessary to comply with a legal obligation.

4. Data Retention

Contact form data is retained for a maximum of 24 months from the date of submission, unless an ongoing relationship requires longer retention or legal obligations dictate otherwise.

Technical and analytics data is retained for a maximum of 14 months from collection.

Cookie consent preferences are stored for 12 months and renewed upon each visit where consent is refreshed.

After the applicable retention period, data is securely deleted or anonymised.

5. Data Sharing and Transfers

We do not sell, rent, or trade your personal data to third parties. We may share data with:

• Hosting and infrastructure providers: who store data on servers located within the European Economic Area (EEA) or in countries with an adequacy decision from the European Commission.
• Analytics providers: subject to your cookie consent, analytics tools may process anonymised or pseudonymised data.
• Legal and regulatory authorities: where required by applicable law, court order, or regulatory requirement.

Any international transfer of personal data outside the EEA is conducted in accordance with Chapter V of the GDPR, using appropriate safeguards such as Standard Contractual Clauses.

6. Your Rights

Under the GDPR and LOPDGDD, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): to obtain confirmation of whether we process your data and to receive a copy.
• Right to rectification (Art. 16 GDPR): to request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17 GDPR): to request deletion of your data where no legitimate basis for retention exists.
• Right to restriction (Art. 18 GDPR): to request that we limit processing in certain circumstances.
• Right to data portability (Art. 20 GDPR): to receive your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): to object to processing based on legitimate interests.
• Right to withdraw consent (Art. 7.3 GDPR): where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at: info@kredanorio.com

You also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos, AEPD) at www.aepd.es.

7. Security

We implement appropriate technical and organisational security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures are reviewed and updated regularly.

While we take reasonable steps to protect your data, no transmission over the internet is entirely secure. We cannot guarantee absolute security of data transmitted to our website.

8. Cookies

This website uses cookies and similar tracking technologies. For detailed information about the cookies we use, the purposes for which we use them, and how to manage your preferences, please refer to our Cookie Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or regulatory guidance. The updated date at the top of this page indicates when the most recent revision was made. We encourage you to review this policy periodically.

10. Contact

For any questions or concerns regarding this Privacy Policy or the processing of your personal data, please contact us:

Email: info@kredanorio.com
Address: Pl. la Constitución, 7, 41970 Santiponce, Sevilla, Spain
Phone: +34 854 788 104