Privacy policy

The controller of your personal data is Diqoded, the trade name of a self-employed professional (autónomo) registered in Spain and based in the Región de Murcia. Contact for any privacy matter: contact@diqoded.com.

Full identification details of the controller are included in every proposal, contract and invoice and are provided on request to data subjects and public authorities with a legitimate interest.

• Free project audit form: the link to the website you want reviewed, your email address and the language of the page you used.
• Messages you send us by email or WhatsApp: your name, contact details and anything you choose to include in the message.
• Clients: identification, contact and billing details needed to prepare proposals, contracts and invoices, and the information exchanged during the project.
• Analytics, only if you accept analytics cookies: pages visited, approximate location (country/city), device and browser type, collected by Google Analytics in aggregated form.
• Technical data: our hosting provider processes IP addresses and request logs to deliver the website and keep it secure.

We do not ask for special categories of data (health, beliefs, etc.). Please do not send them to us.

• To prepare and send the audit you requested and to reply to your messages — steps taken at your request before a possible contract (Art. 6(1)(b) GDPR).
• To provide our services, manage the contract, invoice and collect payments — performance of a contract (Art. 6(1)(b) GDPR).
• To keep accounting and tax records — legal obligation (Art. 6(1)(c) GDPR).
• To measure the use of the website with Google Analytics — your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• To keep the website secure and prevent abuse of the forms — our legitimate interest (Art. 6(1)(f) GDPR).

We do not use your data for automated decision-making or profiling, and we do not send newsletters or marketing emails unless you expressly ask for them.

• Audit requests and enquiries that do not lead to a project: up to 12 months after our last contact.
• Client data: for the duration of the contract and afterwards for the periods required by law (generally 6 years for accounting records under the Spanish Commercial Code and 4 years for tax purposes).
• Analytics data: up to 14 months in Google Analytics.
• Server logs: for the short period set by our hosting provider for security purposes.

When the period ends, the data is deleted or anonymised.

We do not sell or rent personal data. We share it only with service providers that process it on our behalf and under our instructions, to the extent necessary:

• hosting and email providers that run this website and our mailbox;
• Google (Google Ireland Ltd.) for Google Analytics, only if you consent;
• WhatsApp (Meta Platforms Ireland Ltd.), only if you choose to contact us there — WhatsApp then processes your data under its own privacy policy;
• accounting or tax advisers, and public authorities when required by law.

Some providers may process data outside the European Economic Area, for example in the United States. In that case the transfer relies on an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework) or on Standard Contractual Clauses approved by the Commission.

You can ask us at any time to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on consent, you can withdraw it at any time without affecting earlier processing.

To exercise your rights, write to contact@diqoded.com. We may ask you to confirm your identity. We reply within one month.

If you believe your data has not been handled correctly, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

We apply reasonable technical and organisational measures to protect personal data: encrypted connections (HTTPS), restricted access to the admin area and mailbox, and encryption of stored credentials. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

This website is intended for adults and businesses. We do not knowingly collect data from people under 18.

We may update this policy when our services or the law change. The current version is always published on this page with its date.