Privacy policy

1. Data controller

The controller is Farouk Ahmed Ibrahim (trading as Sandruci), NIE Y6037988L, Madrid – Cuenca, España. Contact: Email us.

2. What data we collect

We only collect the data you give us and the minimum technical data needed to run the site:

• Contact form: your name, email address, company, the service you are interested in and your message.
• Technical data: IP address and browser details, processed by our hosting and security provider to deliver and protect the site.
• Analytics: only if you accept analytics cookies (see our Cookie policy).

3. Purposes and legal basis

We use your data to answer your enquiry and to prepare and send you a proposal (legal basis: your request and pre-contractual measures, article 6.1.b GDPR; and our legitimate interest in handling business enquiries, article 6.1.f). We use analytics data only with your consent (article 6.1.a). We do not take automated decisions about you and we do not use your data for advertising.

4. How long we keep it

We keep your enquiry data for the time needed to handle it and, afterwards, blocked for the legal limitation periods. If we start working together, the data is kept for the duration of the relationship and the legal retention periods that apply.

Job applications: if you apply for a role, we keep your CV and the details you send in a private, access-controlled storage area so that our team can review your application. We keep them for up to 6 months and then delete them, unless you ask us to delete them sooner.

5. Who receives your data

We do not sell your data. To run the site we use service providers who process data on our behalf:

• Form processing: a form service that receives what you send through our forms and forwards it to our email.
• Hosting and security: the providers that host the website and protect and deliver it.
• CV storage: a private storage service for CVs sent with job applications.
• Analytics: an analytics service, only if you accept analytics cookies.

If a provider processes data outside the European Economic Area, the transfer is protected by the safeguards required by the GDPR, such as an adequacy decision of the European Commission or standard contractual clauses.

6. Your rights

You can exercise your rights of access, rectification, erasure, restriction, portability and objection, and withdraw any consent you have given, by writing to Email us. We will answer within one month.

If you believe your data has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

7. Security

We apply reasonable technical and organisational measures to protect your data.

8. Changes to this policy

We may update this policy to reflect changes in the law or in our services. The date of the latest version is shown at the top of this page.