01Data controller
Sandbox Dynamics, Pamplona (Navarre). Email for privacy matters: admin@sandboxdynamics.es.
02What data we process
The data you give us in the contact form: name, company, email and the description of your enquiry. Also anything you include if you email us directly.
The server also logs technical data about each visit (IP address, date and time, requested page and browser) to keep the website secure.
03Purposes and legal basis
To reply to your enquiry and, where appropriate, prepare a proposal. The legal basis is the consent you give when submitting the form and taking pre-contractual steps at your request (GDPR art. 6.1.a and 6.1.b).
To protect the website against abuse and attacks, based on our legitimate interest (GDPR art. 6.1.f).
We do not use your data for marketing and we do not make automated decisions with it.
04How long we keep it
Enquiries are kept for as long as needed to handle them and, if no business relationship starts, for at most 24 months. Server logs are kept for 14 days.
05Who else can access the data
We do not share your data with third parties unless required by law. We use the following processors to run the service:
Website hosting: Hostinger (Germany, EU).
Delivery of form messages: Resend, Inc. (United States). The international transfer relies on Resend's certification under the EU-U.S. Data Privacy Framework and the European Commission's standard contractual clauses.
Email: Microsoft 365.
06Your rights
You can access, correct or delete your data, object to or restrict its processing, request portability and withdraw your consent at any time by writing to admin@sandboxdynamics.es.
If you believe we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
07Security
The website uses an encrypted connection (HTTPS) and access to received messages is restricted to the team.