Privacy Policy
This policy explains what personal data Sotavento Labs SLU collects, why, and how we protect it. We are committed to processing personal data in compliance with Regulation (EU) 2016/679 (GDPR) and applicable Spanish data protection law (LOPDGDD).
The data controller for personal data processed through this website is:
Sotavento Labs SLU
CIF: B26692848
Calle Valderribas 14, Planta Primera Puerta A
28007 Madrid, Spain
Contact: hello@sotaventolabs.eu
2.1 Website visitors — analytics
When you visit sotaventolabs.eu and accept cookies, we collect usage data (pages visited, session duration, referrer, device type) via Vercel Analytics.
Vercel Analytics does not use cross-site tracking cookies. Analytics are only loaded after you give consent via our cookie banner.
Legal basis: Consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time using the cookie preference button at the bottom of the page.
2.2 Contact form
When you submit our contact form, we collect your name, email address, and optionally your phone number. We use this information solely to respond to your enquiry.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — responding to a request you initiated.
We use a single category of cookies:
| Cookie | Purpose | Duration |
|---|---|---|
sl_cookie_consent | Stores your analytics consent preference (localStorage) | Until you clear browser storage |
Analytics providers may set their own first-party cookies once consent is given. We do not use advertising, remarketing, or profiling cookies.
We share personal data only with the following categories of recipients, and only to the extent necessary:
| Provider | Purpose | Location |
|---|---|---|
| Vercel Inc. | Hosting and web analytics | EU region |
| Holded Technologies SL | Invoicing and accounting (billing data only) | EU (Spain) |
All providers are either established in the EU or offer GDPR-compliant data processing agreements. We do not sell personal data to third parties.
All primary infrastructure is hosted within the European Economic Area. Where any provider processes data outside the EEA, we ensure adequate safeguards are in place (Standard Contractual Clauses or equivalent adequacy decisions) before any transfer occurs.
We retain personal data only as long as necessary for the purpose for which it was collected:
- Analytics data: retained per each provider's policy (typically 13 months or less).
- Contact form submissions: retained for up to 2 years after the last correspondence, then deleted.
- Invoicing and tax records: retained for 6 years as required by Spanish tax law.
Under the GDPR, you have the following rights regarding your personal data:
- Access — request a copy of the data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — request deletion of your data where there is no lawful reason to retain it.
- Restriction — ask us to pause processing in certain circumstances.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at hello@sotaventolabs.eu. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD) at www.aepd.es.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include encryption in transit (TLS), access controls, and regular security reviews. No system is completely immune to risk; we will notify affected individuals and the competent supervisory authority in the event of a data breach as required by law.
We may update this Privacy Policy from time to time. Material changes will be notified by updating the "Last updated" date at the top of this page. Continued use of our services after changes are published constitutes acceptance of the updated policy.
For any privacy-related questions or to exercise your rights:
Sotavento Labs SLU
Calle Valderribas 14, Planta Primera Puerta A, 28007 Madrid, Spain