Privacy policy

Who is responsible for your data

The data controller is ImmersiveScroll. You can contact us about anything related to your data at info@immersivescroll.com.

What data we process

When you use the contact form we receive:

• Your name and email address (required).
• Your company (optional).
• The message you write (required) and the language of the page you sent it from.
• Technical data sent with every request: your IP address and your browser’s user agent. We include them in the enquiry email and use them to stop spam and abuse.

We do not ask for special categories of data. Please do not include them in your message.

Why we use it and on what legal basis

• To answer your enquiry and, if you ask for it, to prepare a quote or proposal. Legal basis: your consent, given with the checkbox on the form (Art. 6(1)(a) GDPR), and steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• To keep the website secure and protect the form from spam and abuse (submission limits, a hidden anti-bot field, a minimum fill-in time and short-lived server logs). Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

We do not use your data for advertising, we do not send newsletters, we do not sell your data and we do not make automated decisions or build profiles about you.

How long we keep it

• Enquiries: for as long as we need to deal with them and, if no project follows, for up to 12 months after our last exchange. If you become a client, we keep what is needed for the periods required by tax and commercial law.
• Copy of your enquiry in our database (with a pseudonymised hash of your IP address and your browser’s user agent, so that no enquiry is lost if the email fails): deleted automatically 12 months after it arrives. The notification email waits briefly in the server’s job queue and is removed from it once delivered.
• Server logs: up to 14 days.
• Anti-abuse counters linked to your IP address: up to 24 hours.

Who receives it

We do not share your data with third parties for their own purposes. To run this website we rely on service providers that process data only on our behalf, under a data processing agreement:

• Hosting provider (the server that runs this website).
• Network and security provider (content delivery, DNS and protection against attacks; it also forwards emails sent to our domain).
• Email delivery provider (delivers your enquiry to our inbox).

Some of these providers may process data outside the European Economic Area, for example in the United States. When that happens, the transfer is covered by an adequacy decision (such as the EU-US Data Privacy Framework) or by the European Commission’s standard contractual clauses. We will also share data with public authorities when the law requires it.

Your rights

You can ask us at any time to access, correct or delete your data, to restrict or object to its processing, or to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time without affecting what was done before. Write to info@immersivescroll.com and tell us which right you want to exercise; we may ask you to confirm your identity. We will answer within one month.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or to the supervisory authority of the EU country where you live.

Cookies

This website only uses technical cookies that are strictly necessary for it to work: a session cookie and a security token (XSRF-TOKEN) that protects the contact form against cross-site request forgery. They expire after two hours of inactivity at most. They do not track you and, under Article 22.2 of the Spanish Information Society Services Act (LSSI), they do not require consent. We do not use analytics, advertising or social media cookies.

Required information

Your name, email and message are required to answer you; without them we cannot reply. Your company is optional.

Minors

This website is aimed at businesses and professionals. If you are under 14, please do not send us your personal data.

Security

We protect your data with appropriate technical and organisational measures: encrypted connections (HTTPS), a hardened server with restricted access, and access to enquiries limited to the people who need it to answer you.

Changes to this policy

We may update this policy when the law or our services change. The date at the top always shows the current version.