Privacy policy
Last updated: 12 June 2026
1. Data controller
Controller: [COMPLETAR: legal name]. Tax ID: [COMPLETAR]. Address: [COMPLETAR]. Email: hola@deslioo.com.
2. What data we process
We process the data you provide through the contact form: name, email and, optionally, company, sector and your message.
3. Purpose
To respond to your request and, where applicable, to arrange the diagnostic call and a subsequent service proposal.
4. Legal basis
Processing is based on your consent, given when you submit the form (art. 6.1.a GDPR). You may withdraw it at any time.
5. Retention
We keep your data while handling your request and, afterwards, for the legally required periods. It is then deleted.
6. Recipients
Deslioo Expedientes is an internal Deslioo system for managing cases and clients; it is not an external provider or a data processor in itself. External providers do intervene at different points along the process and may act as data processors: hosting for the website and for Deslioo Expedientes (Vercel Inc.), the database where case records are stored (Supabase), sending the notification to the team (Resend) and, when active, anti-spam verification for the form (Cloudflare Turnstile). [COMPLETAR: confirm those actually used and formalise the processing agreement with each before publishing.]
If any of these providers processes data outside the European Economic Area, appropriate safeguards must apply (e.g. European Commission standard contractual clauses). [COMPLETAR: confirm each provider's location and, where applicable, the safeguard used.]
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to hola@deslioo.com.
If you believe the processing does not comply with the law, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration.