Privacy policy
This policy explains how [LEGAL NAME, S.L.] ("we") processes personal data collected through https://www.halfbridge.eu, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
1. Controller
[LEGAL NAME, S.L.], NIF [NIF / CIF], [Street and number], [Postcode] Barcelona, Spain. Contact for privacy matters: privacy@halfbridge.eu.
2. Data we collect and why
| Activity | Data | Purpose | Legal basis |
|---|---|---|---|
| Online estimator | Name, company, e-mail, answers to the questionnaire, estimate reference | Prepare and send the detailed estimate you requested, and follow up on it | Steps at your request prior to a contract (Art. 6.1.b GDPR) |
| Fixed-quote request and NDA | Name, company, e-mail, role, electronic signature data, documentation you upload | Sign the confidentiality agreement, receive your documentation and prepare a fixed quote | Steps at your request prior to a contract (Art. 6.1.b GDPR) |
| Written communication | Messages exchanged by e-mail or in a shared chat channel | Carry out and document the project | Contract (Art. 6.1.b GDPR) |
| Contact form and e-mail | Name, company, e-mail, project stage, message | Answer your enquiry | Steps prior to a contract (Art. 6.1.b) and legitimate interest in answering business enquiries (Art. 6.1.f) |
| Commercial e-mails | Name, e-mail, company | Send occasional news about our services and hardware development | Your consent (Art. 6.1.a GDPR; Art. 21 LSSI-CE), which you can withdraw at any time |
| Pre-launch priority list and market study | Name, company, e-mail, answers to the estimator, message | Answer your request personally, ask you about your project, and contact you when the service opens. Aggregated, anonymous results are used to decide whether and how to launch the service. | Your consent (Art. 6.1.a GDPR), which you can withdraw at any time |
| Cookieless visit statistics | Pages viewed, steps of the estimator, referring website, campaign tags, device type, time zone and a visitor code derived from IP and browser with a random key that changes every day. The IP address itself is not stored. | Count visits and see which pages and channels are useful | Legitimate interest (Art. 6.1.f GDPR). Nothing is stored on your device. |
| Web analytics | Pseudonymous identifiers, pages visited, device and approximate location (Google Analytics 4) | Understand how the website is used and improve it | Your consent (Art. 6.1.a GDPR; Art. 22.2 LSSI-CE) for cookies and identifiers. Before you choose, Google Analytics only receives cookieless technical signals (IP address, browser user agent, referrer and page address) |
| Server logs | IP address, date, requested URL, browser | Security and operation of the website | Legitimate interest (Art. 6.1.f GDPR) |
| Clients and suppliers | Contact and billing data | Contract management, invoicing and legal obligations | Contract (Art. 6.1.b) and legal obligation (Art. 6.1.c) |
Giving us your data is voluntary, but without an e-mail address we cannot send you an estimate or answer your enquiry. We do not make decisions based solely on automated processing that produce legal effects on you; the online estimate is an indicative calculation that an engineer reviews.
3. How long we keep data
- Estimate and contact requests that do not lead to a contract: up to 24 months after the last contact.
- Client data: for the duration of the relationship and afterwards for the periods required by tax and commercial law (generally six years).
- Commercial e-mail list: until you unsubscribe or withdraw consent.
- Analytics data: 14 months in Google Analytics.
- Server logs: up to 90 days, unless needed to investigate a security incident.
4. Recipients
We do not sell personal data. We share it only with providers that process it on our behalf under a data processing agreement: web hosting, the form-processing service that delivers form submissions to us, our e-mail provider, the electronic signature service used for the NDA, the file-transfer service used for documentation uploads, the chat platform if you choose to use one, AI service providers we use to draft documents and correspondence (under terms that forbid using your data to train their models) and, if you consent, Google Ireland Limited for analytics. We may disclose data to authorities where required by law.
5. International transfers
Some providers, including Google, may process data outside the European Economic Area. Where this happens, transfers rely on an adequacy decision (such as the EU-US Data Privacy Framework for certified companies) or on the European Commission's Standard Contractual Clauses.
6. Your rights
You can request access, rectification, erasure, restriction of processing, data portability and object to processing, and you can withdraw consent at any time without affecting earlier processing. Write to privacy@halfbridge.eu indicating the right you wish to exercise. Every commercial e-mail includes a link to unsubscribe. If you believe we have not handled your data correctly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or the authority of your EU country of residence.
7. Security
We apply technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS), access control and confidentiality agreements. Design files you send us are stored with restricted access and are covered by our confidentiality obligations.
8. Changes
We may update this policy. The date at the top shows the latest version.