Privacy policy

Data controller

Adrián De Los Reyes Raposo, tax ID 49047775E, Calle Palmilla 14, 11540 Sanlúcar de Barrameda (Cádiz), España. Email: hola@qodestudios.com.

What data we process

• Assessment form: name, job title, company, email, phone and website (optional), information about your project, meeting preference and time, time zone, language and the source of your visit (for example, the campaign you came from).
• Visit statistics: page viewed, language, approximate country and referring website, aggregated and without cookies. We do not store your IP address.
• Advertising measurement: only if you accept Google and LinkedIn cookies.
• Business contacts: if you hold a senior role at a company that might be interested in our services, we may process your name, job title, company and the professional information you or your company have made public (company website, press releases, news and public professional profile). Never details of your personal life.

Purposes and legal basis

• Replying to your request, arranging the meeting and preparing a proposal: pre-contractual measures at your request and your consent (Art. 6(1)(b) and 6(1)(a) GDPR).
• Understanding which content and channels work through aggregated statistics: legitimate interest (Art. 6(1)(f) GDPR).
• Measuring campaign performance: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Introducing our services to you as a professional: our legitimate interest in developing our business (Art. 6(1)(f) GDPR). We use artificial intelligence tools to summarise public information about your company and prepare a relevant message; a person always reviews the message before it is sent. You can object at any time by replying to the message or writing to hola@qodestudios.com, and we will stop contacting you.

How long we keep it

For as long as the business relationship lasts. If no relationship follows, we delete your data no later than 24 months after the last contact, unless we are legally required to keep it. Business contact data for people who do not reply is deleted no later than 12 months after the first contact; if you object, we keep only what is strictly necessary to avoid contacting you again.

Who else accesses the data

We do not sell or share your data. It is processed on our behalf, with GDPR safeguards, by these providers: Netlify (web hosting; USA, under standard contractual clauses and the EU-US Data Privacy Framework), Supabase (database, hosted in the European Union), Resend (confirmation emails; USA, under standard contractual clauses), Railway (servers in the European Union for our automated processes), Anthropic (AI analysis of public professional information; USA, under standard contractual clauses) and, only if you accept, Google and LinkedIn for advertising measurement.

Your rights

You can access, rectify and erase your data, object to or restrict its processing, request portability and withdraw your consent by writing to hola@qodestudios.com. You can also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or your local authority.

Security

We apply technical and organisational measures to protect your data: encrypted connections, restricted access to the management panel and providers with security guarantees.