Privacy policy

Data controller

What data we process and why

This site has no user accounts and no advertising. We only process personal data in these cases:

• When you book a call. Booking runs on Cal.com. We receive your name, your email and whatever you write when booking, and use them to prepare the call and reply to you.
• When you write to us. We use your email and what you tell us to reply and, if you ask, to send you a proposal.
• When you request a Little Academy guide. Your name, email, company and, if you give it, your job title, to give you access to the guide. If you tick the box, also to send you new guides, news and offers tailored to your profile by email; you can withdraw that permission at any time. We store them in our CRM (Twenty), installed on our own servers in the European Union.
• When you are a client. We process your team's contact details and billing data to provide the service, invoice and meet our legal obligations.
• When you browse. The server logs technical data for each visit (IP address, browser, page and time) to keep the site secure and fix errors.
• If you accept analytics. Google Analytics 4 measures in aggregate how the site is used: pages viewed, where visits come from, device and approximate country or city. It does not load without your permission, and we do not use it to identify you or for advertising.

Legal basis

• Pre-contractual steps and the performance of a contract, when you book a call, ask for a proposal or are a client (art. 6.1.b GDPR).
• Your request, to give you access to the guide you ask for (art. 6.1.b GDPR), and your consent, only if you tick the box, to send you commercial communications (art. 6.1.a GDPR and art. 21 of Spain's LSSI-CE).
• Your consent, for analytics, which only switches on if you accept it in the cookie notice (art. 6.1.a GDPR and art. 22.2 of the LSSI-CE).
• Compliance with legal obligations, for invoicing and accounting (art. 6.1.c).
• Our legitimate interest in keeping the site secure and replying to people who write to us (art. 6.1.f).

How long we keep it

Data from people who contact us, for as long as the conversation lasts and up to one year afterwards if they do not become clients. Client data, for the duration of the relationship and then for the periods required by law (six years for commercial and accounting records). Server logs are deleted after 30 days at most, and analytics data after 2 months (Google Analytics keeps only aggregated reports).

Who we share it with

We do not sell or hand data over to third parties. Only the providers we need to operate have access, under a data processing agreement:

• Hetzner Online GmbH (Germany), website hosting, on servers in the European Union.
• Cal.com, Inc. (United States), booking calendar. The transfer relies on the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.
• Google Ireland Limited (Ireland), only if you accept analytics: Google Analytics 4. Google may process data in the United States; the transfer relies on the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.

We may also disclose data to public authorities when required by law.

Your rights

You can ask us for access to your data and for its rectification, erasure, portability or restriction, or object to its processing. Write to legal@midatel.com stating which right you want to exercise. We will reply within one month.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es).

Security

The site only works over an encrypted connection (HTTPS), servers are updated and monitored daily, and access to data is limited to the team members who need it.