At NULLSTRATA S.L. («NULLSTRATA», «the Controller») we take the protection of your personal data very seriously. This policy describes how we process personal information, in accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and Digital Rights (LOPDGDD), and Law 34/2002 (LSSI-CE).
1. Data controller
- Company name: NULLSTRATA S.L.
- Contact: nullstratasl@gmail.com
2. Data we process and purposes
Our website is informational and commercial. The personal data we may process is what you voluntarily provide, for the following purposes:
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, website/infrastructure to review and message (contact email) | Handle your audit request, answer enquiries and prepare commercial proposals | Consent (Art. 6.1(a) GDPR) and pre-contractual measures (Art. 6.1(b) GDPR) |
| Billing and contractual data (clients) | Service provision, invoicing and tax obligations | Contract performance and legal obligation (Art. 6.1(b) and (c) GDPR) |
This website uses no cookies or browser storage, so no data is processed for that purpose (see the Cookie Policy).
3. Data retention
Data is kept only for as long as necessary for the purposes described: commercial contact data while you do not object or withdraw your consent; billing data for the statutory retention periods required by tax and commercial law (at least 4 years under the Commercial Code and the Spanish General Tax Law).
4. Lawfulness and withdrawal of consent
Processing is based on your consent, which you may withdraw at any time by writing to nullstratasl@gmail.com, without affecting the lawfulness of prior processing. The data you provide by email is necessary to handle your request.
5. Recipients and transfers
We do not share your data with third parties, except where required by law. Should we contract professional hosting or email services, data may reside on servers located in the European Union (or countries with adequate safeguards under Art. 44 et seq. GDPR). No international transfers are made without the required guarantees.
6. Security measures
We process data applying appropriate technical and organisational measures (Art. 32 GDPR): encryption in transit, access control, enhanced confidentiality due to the nature of our services, and a processing register under Art. 30 GDPR.
Important note: as part of our security audits we may access client systems. All technical data obtained is processed under strict confidentiality, solely for the purposes of the engagement, and is deleted when the service ends unless required by law.
7. Data subject rights
You may exercise, free of charge, your rights of access, rectification, erasure, objection, restriction of processing, portability and not to be subject to automated decisions (Arts. 15 to 22 GDPR). To do so, write to nullstratasl@gmail.com stating the right you wish to exercise and attaching a copy of your ID or equivalent document.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), especially if you consider that we have not satisfactorily addressed your rights.
8. Minors
This site is aimed at people over 14 years of age. In accordance with Art. 7 GDPR and Art. 7 LOPDGDD, we do not intentionally collect data from children under 14 without parental consent.
9. Changes
We may update this policy due to regulatory or case-law changes or changes to our services. The current version will always be available on this page with its update date. We recommend reviewing it periodically.
10. Contact and Data Protection Officer
For any data protection question: nullstratasl@gmail.com. Currently, due to the nature and volume of processing, appointing a DPO is not mandatory (Art. 37 GDPR), but your privacy is our priority.
Related documents: Legal Notice · Cookie Policy