Last reviewed: 11 October 2026.
This policy explains how data relating to visits and enquiries to IA Gestiona is handled. The form prepares a message on your device: we only receive your enquiry if you choose to send it by email or WhatsApp, or contact us by phone.
1. Data controller
Marc Serra Rebolledo, a self-employed professional trading as IA Gestiona, Spanish tax identification number (NIF) 44016722N, at c/ Josep Valls, 9 1B, 08195 Sant Cugat del Vallès (Barcelona), Spain. For privacy matters, email info@iagestiona.com, call +34 652 730 634 or write to this address.
2. Data and how the form works
The form requests your name, email, service of interest and description of your needs to prepare an enquiry. You can choose “Not sure yet” if you have not decided on a service. Business and phone number are optional. Providing these details is not a legal requirement: these are the fields needed to use this assistant. You can email or call directly instead. Providing information does not commit you to purchasing a service.
When preparing an enquiry, the code assembles the information in the page’s memory and displays a summary. It does not send it to a form server, CRM or artificial intelligence tool, or save it in website cookies or local storage. Opening email passes the text to your application through a mailto link; you must complete the sending process. Preparing the message or opening that application does not confirm sending or receipt. Downloading the summary creates a file on your device under your control. Your browser or email application may retain form information or drafts according to their own settings.
If you contact us directly by email, WhatsApp or phone, we use the contact details and content you provide to respond. Delivering pages also requires the hosting infrastructure to process technical data, such as your IP address and browser request. WordPress may also handle administration account data and identifiers needed to sign in. This is separate from details a visitor prepares in the contact form.
Only send relevant information. Do not include passwords, full payment card numbers, health information or confidential customer data. If a later project requires access to other people’s data, its scope, instructions and processing terms will be agreed in advance.
3. Purposes and legal bases
- Assessing your request, responding and preparing a quote: steps taken at your request before a contract, GDPR Article 6(1)(b); if you purchase a service, performing the contract.
- General enquiries or people acting for a business: the legitimate interest in responding to those who contact us and maintaining the professional communication requested, GDPR Article 6(1)(f). You can object on grounds relating to your particular situation.
- Handling data protection rights and other applicable obligations: compliance with legal obligations, GDPR Article 6(1)(c).
- Delivering pages and protecting access to the website: the legitimate interest in maintaining the service and preventing misuse, GDPR Article 6(1)(f), for necessary technical data and processing for which the owner is responsible.
Marketing consent is not required to receive a response. Using this website does not add your contact details to marketing campaigns or newsletters. Handling a service request is not based on compulsory acceptance of this policy.
4. Retention
Enquiries are kept while they are being handled and for any requested follow-up that remains necessary. If no professional relationship starts and there is no longer a purpose that justifies retention, they are deleted. If you purchase a service, the necessary information is managed for the relationship and the statutory periods applicable to its documentation.
Where data must be retained for potential liabilities, it will be restricted from ordinary use for the applicable limitation period and then deleted. There is no single fixed period for all enquiries and documents: it depends on their nature and applicable obligations. This website does not keep a copy of a summary you download.
5. Recipients and external services
The owner handles enquiries. Email, hosting and communications providers may be involved in transmitting, storing or providing technical support for information, depending on the channel used. Competent authorities or public bodies may receive data where a legal obligation applies. Data is not sold or shared for third-party advertising.
The IA Gestiona theme for WordPress includes no advertising analytics, embedded chat or form connected to a lead collection platform. Its form does not send the details entered to the server. Other plugins may change this behaviour: any addition requires a review of processing and appropriate information before use.
WhatsApp is optional. Selecting its link opens an external service with its own terms and processing. Read WhatsApp’s privacy policy for the European Economic Area. Email and phone are available alternatives.
6. Where data is processed
Hosting and communications services may use infrastructure in different countries. We do not claim that all processing takes place within the European Economic Area. This installation version must be completed by verifying the hosting, email and plugins actually used, their locations and any relevant international transfer safeguards before public launch. You can request information about the services used and available safeguards at info@iagestiona.com.
7. Your rights
Where the legal requirements are met, you can request access, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interests. If future processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing.
Email info@iagestiona.com or write to the controller’s address, identifying the right you wish to exercise and providing enough information to locate your relationship with IA Gestiona. Additional identification information will only be requested where there are reasonable doubts. Requests are generally handled free of charge within one month; if their complexity or number requires a lawful extension, you will be informed of it and its reasons within that first month.
If you believe your rights have been infringed, you can complain to the Spanish Data Protection Agency (AEPD), without prejudice to other available remedies. See the AEPD’s information about exercising your rights.
8. Automated decisions and updates
This website does not create marketing profiles or make automated decisions with legal or similarly significant effects on you. Examples of automation and AI describe potential services; they do not process your enquiries using artificial intelligence. If the website’s operation changes or a different purpose is introduced, this information will be updated and the relevant notices and controls provided.
References: the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 on data protection and digital rights. See our cookie policy and legal notice.