Privacy policy

1. Data controller

The data controller for the personal data collected through this website is:

• Identity: Roberto Carrera Santa María
• Address: Carrer del Pisuerga 32, 43882 Segur de Calafell (Tarragona), ES
• Email: contacto@sincronia.agency

2. What personal data do we process?

We process the following categories of personal data:

• Identifying data: name, email, phone, company (when you voluntarily provide them).
• Browsing data: IP address, browser type, pages visited, time on site, for analytical purposes.

3. For what purpose do we process your data?

• To respond to enquiries sent through the contact form.
• To provide contracted services and maintain the business relationship.
• To send commercial communications, only if you have given your explicit consent.
• To analyse site traffic in order to improve the service.

4. Lawful basis

The lawful basis for processing your data is your explicit consent when you tick the privacy checkbox in the form, or the execution of the contract when you are already a customer.

5. Recipients

We do not share your personal data with third parties, except for legal obligations. The recipients with whom we process personal data are:

• Microsoft Clarity (Microsoft Corporation, USA) — analyses site usage through heatmaps and session replays. Microsoft Clarity acts as an independent data controller, with its own purposes and its own lawful basis, and not on Sincronía's behalf. It only runs if you accept the "Analytics" category in the cookie banner.
• Google Analytics 4 (Google Ireland Limited, Ireland; Google LLC, USA) — measures traffic and site usage. Google processes the data under its Data Processing Terms and may act as an independent controller for Google's own purposes. It only runs if you accept the "Analytics" category.
• Cloudflare, Inc. (USA) — hosts and serves the site, applies bot protection and, if you accept it, provides aggregated metrics through Cloudflare Web Analytics. It acts as a data processor.
• Nytro Systems (NytroSEO) — receives the address of each page visited for the internal SEO audit we run from our own dashboard. Technical details are in section 3.1 of the cookie policy.
• Web hosting and email service providers — act as data processors under contract.

Several of these recipients are established outside the European Economic Area. International transfers are safeguarded by the European Commission's Standard Contractual Clauses and by the Data Privacy Framework. You can find the provider-by-provider detail in our cookie policy.

6. Retention

We retain your data as long as the contractual relationship is maintained or you do not request its deletion. Once processing has ended, the data will be retained in a blocked form during the legally applicable period.

Analytics data is kept for each provider's own period: Google Analytics 4 cookies last up to 2 years and Microsoft Clarity cookies up to 12 months, while Clarity session recordings are kept for 30 days from capture. If you withdraw consent, the associated cookies are deleted and measurement stops immediately; your next visit is counted as a new identifier, with no way to reconstruct your earlier browsing.

7. Your rights

You may exercise at any time the rights of access, rectification, erasure, objection, restriction of processing and data portability. To do so, email us at contacto@sincronia.agency.

If you believe your rights have not been properly addressed, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security

We apply appropriate technical and organisational measures to protect your personal data. All information is transmitted encrypted via HTTPS.

9. Consent log

To be able to demonstrate that your consent was given, as required by Art. 7.1 of the GDPR, every time you accept, reject or configure cookies we record on our servers a pseudonymous identifier generated randomly in your browser, the date and time of the decision, the site language and which categories you accepted.

That log lives in our Cloudflare database, the same infrastructure that hosts the site, and does not include your IP address, your browser, or any other data that could identify you. The identifier is a random code that is not linked to your name or your email and, on its own, does not reveal who you are. Its lawful basis is the legal obligation to demonstrate consent, and it is kept for 12 months, after which it is deleted automatically. You can request its deletion at any time by writing to contacto@sincronia.agency, together with the rest of the rights in section 7.