Skip to content
Ideasforge ES
Tell us what you want to improve

Privacy Policy

1. Who is responsible for your data

The controller of the data you give us through this site is Ideasforge, based at Calle Camino Viejo de Vélez 18, 1.º P, 29730 Torre de Benagalbón, Málaga, Spain.

For anything to do with your data, including exercising the rights described below, write to pablo@ideasforge.io. We answer within one month at the latest.

If you believe we have not handled your request properly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos, at www.aepd.es.

2. What we collect, what for, and on what legal ground

This site has no user accounts and no private area. There are only three moments when we handle data about you, and in all three you know it is happening.

When you write to us through a form

The contact form collects your name, email, company, website and the message you write. The exploration form also collects the size of your company, the problem you want solved, where your data sits today, whether it can leave your infrastructure and the timeframe you have in mind.

We use it for one thing: reading your case and answering you. We do not add you to any mailing list and we do not send you anything you did not ask for.

The legal ground is Article 6(1)(b) of the GDPR, which covers steps taken before a contract at your own request. Giving us this data is voluntary, although without your email we have no way to reply.

When you simply visit the site

Our hosting provider keeps technical logs with your IP address and the browser you use, as any server does. They exist so the site works and so we can spot attacks, not to work out who you are. The ground is Article 6(1)(f), our legitimate interest in keeping the site up and safe.

When you accept the measurement cookies

Only if you say yes. Google Analytics tells us which pages get read and which do not, as aggregate figures that do not identify you. The ground is your consent, Article 6(1)(a), and you can withdraw it whenever you like from in the footer. The detail is in the cookies policy.

3. Who else sees your data

We do not sell your data and we do not hand it to anyone so they can sell you something. But three companies process it on our behalf so the site can work, and it is only fair that you know them by name.

  • Cloudflare, which hosts the site and serves the pages. It sees the IP addresses of people browsing.
  • Web3Forms, which collects what you write in the forms and delivers it to us by email. It sees everything you send through them.
  • Google, only if you accepted the measurement cookies. If you refuse, your browser never talks to Google at all.

We will also hand data to the authorities where a law requires us to.

4. Data that leaves the European Union

The three companies above are American, so part of this processing happens outside the European Economic Area. We would rather say it plainly than bury it in a footnote.

Those transfers rely on the mechanisms set out in Chapter V of the GDPR, which depending on the provider means their certification under the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission. If you want to know which one applies to a given provider, write to us and we will tell you.

5. How long we keep it

  • If your inquiry does not become a project, we keep it for one year from our last exchange, in case you pick the conversation back up. Then we delete it.
  • If we end up working together, for as long as the relationship lasts and afterwards for as long as accounting and tax obligations require, which runs to six years.
  • Measurement data expires on its own after fourteen months.
  • Server logs are kept by the hosting provider for a short period, in the order of days.

6. Your rights

At any time, and without having to explain yourself, you can ask us to:

  • Access your data and tell you what we hold.
  • Correct anything that is wrong.
  • Erase it, the so-called right to be forgotten.
  • Restrict what we do with it while a disagreement is settled.
  • Object to processing that rests on our legitimate interest.
  • Take it elsewhere in a format that is actually usable.
  • Withdraw your consent where that was the ground, without affecting what was done before.

Write to the address in the first section. We charge nothing for it and we answer within one month at the latest. We take no automated decisions about you and we do not sort you into profiles.

7. How we protect it

The site is served encrypted end to end, the forms travel over a secure connection and only the person who has to answer them reads the messages. That said, and because we would rather warn than promise, no system connected to the Internet is invulnerable. If a breach ever happened that could affect you, we would tell you.

8. Changes to this policy

If we change how we handle data, we change this page first. When the change touches something you consented to, we will ask you again rather than assume.