Privacy policy

1. Responsible for the treatment

Currently the activity is provided as an independent professional under the brand GMV Solutions. If the legal form changes in the future, this policy will be updated with the new identifying data.

2. Data we collect

We collect personal data in the following cases:

• Contact form / demo request: name, email, company, telephone (optional), approximate number of machines and message. This data is sent through the FormSubmit service and received by email.
• Operational risk diagnosis (diagnosis.gmvsolutions.es): the data entered in the calculator is stored in Google Sheets to be able to prepare the personalized report and contact the user if they request it.
• Analytical cookies: through Google Analytics (GA4) we collect anonymous browsing data (pages visited, time spent, device, approximate location). This data is collected only if the user accepts analytical cookies through the Cookiebot banner.
• Register on the platform (app.gmvsolutions.es): administrator email and password. In certain operational flows, operators can enter a basic identifier for internal use (for example, name or alias) along with the company code to record the execution of the process.

3. Purpose of treatment

We process personal data for the following purposes:

• Respond to requests for information, contact or demo.
• Prepare operational risk diagnosis reports.
• Manage registration and access to the REELEVO platform.
• Analyze the use of the website to improve the user experience.
• Send commercial communications related to our services, only if the user has given their express consent.

4. Legal basis of treatment

• Consent of the interested party (art. 6.1.a RGPD): for sending commercial communications and installing analytical cookies.
• Execution of a contract or pre-contractual measures (art. 6.1.b RGPD): to respond to demo requests, prepare diagnoses and manage the provision of the REELEVO service.
• Legitimate interest (art. 6.1.f RGPD): for the improvement of the website and the prevention of fraud.

5. Data recipients

Personal data may be communicated to the following recipients:

• Supabase Inc. (database infrastructure and authentication): servers in the European Union.
• Vercel Inc. (web hosting): with standard contractual clauses for international transfers.
• Google LLC (Google Analytics, Google Sheets): with standard contractual clauses for international transfers.
• FormSubmit (contact form processing).
• Cookiebot / Usercentrics (cookie consent management).

We do not sell, rent or transfer personal data to third parties for commercial purposes.

6. Data retention

• Contact information: are kept as long as a commercial relationship or legitimate interest exists, and in any case for the legally required time.
• Diagnostic data: are kept for 12 months from their collection.
• Platform data: are kept as long as the account is active. After deregistration, they are deleted within a maximum period of 30 days.
• Cookies: as indicated in the cookie policy.

7. User rights

In accordance with the General Data Protection Regulation (RGPD) and Organic Law 3/2018 (LOPDGDD), the user can exercise the following rights:

• Access: know what personal data we process.
• Rectification: request the correction of inaccurate data.
• Deletion: request the deletion of data when it is no longer necessary.
• Limitation of treatment: request that the use of data be limited in certain circumstances.
• Portability: receive the data in a structured and commonly used format.
• Opposition: oppose the processing of data in certain circumstances.

To exercise any of these rights, send an email to hola@gmvsolutions.es indicating the right you wish to exercise and attaching a copy of your identity document.

If you consider that the processing of your data does not comply with the regulations, you can file a claim with the Spanish Data Protection Agency (www.aepd.es).

8. Data security

We apply technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure or destruction. Among other measures:

• Communications encrypted using HTTPS/TLS.
• Storage on servers with Row Level Security in the European Union.
• Restricted access to data through roles and permissions.
• Passwords hashed with secure algorithms.

9. Modifications

GMV Solutions reserves the right to modify this privacy policy to adapt it to legislative developments or changes in our services. Any modification will be published on this page with the corresponding update date.