Skip to content
Elevam
Privacy Policy

Privacy Policy

Last updated: May 13, 2026

At Elevam we treat personal data with the same criteria we would expect for our own: clear purpose, solid legal basis and defined retention periods. This policy explains what data we collect, why, who we share it with and how you can exercise your rights at any time.

  1. 01

    Data controller

    The controller of your personal data is Fullseo S.L.U. («Elevam»), tax ID B70844758, with address at Calle Bages 6, 1º 2ª, 43201 Reus (Tarragona), Spain. For any data protection matter you may contact: Asier López Ruiz (Spanish ID 39960791Q), data protection lead at Elevam. Email: info@elevam.es We are not required to designate a formal Data Protection Officer (DPO) under article 37 GDPR, as our activity does not fall within the cases requiring it.

  2. 02

    Data we collect and how we obtain it

    We collect data strictly necessary for the purposes set out in this policy. We process the following categories: Identification and contact data: name, surname, email, phone, company, job title. We obtain it when you fill out the contact form, subscribe to the newsletter, download a resource, schedule a call or write to us directly. Browsing data: IP address (anonymized when possible), device and browser type, pages visited, time on page, traffic source. Collected via cookies and analytics tools subject to your consent. Full detail in the Cookie Policy. Public professional data: when carrying out B2B commercial prospecting, we may consult public sources (LinkedIn, corporate websites, commercial registries, sector press) to identify relevant profiles. We only process professional data (job title, company, corporate email) under legitimate interest and never sensitive personal data. Contractual data: when you contract services, we process the data necessary to manage the relationship (billing, taxation, service delivery, support).

  3. 03

    Processing purposes

    We process data for the following purposes: • Respond to queries and requests received via the contact form, email or scheduled calls. • Send commercial communications and newsletters when the user has given express consent, or when there is a prior contractual relationship and the services are similar (legitimate interest). • Deliver the consulting services contracted and manage the contractual relationship. • Comply with legal, tax and accounting obligations. • Carry out B2B commercial prospecting on public professional data. • Analyze the use of the website to improve experience and content, via analytics tools with prior consent. • Measure the effectiveness of advertising campaigns on social networks and search engines (LinkedIn, Meta, Google, TikTok), with prior consent.

  4. 04

    Legal bases

    Each purpose has a specific legal basis: • Consent of the data subject (art. 6.1.a GDPR): for sending commercial communications without a prior relationship, analytics and marketing cookies, and newsletter subscription. • Performance of a contract (art. 6.1.b GDPR): for the delivery of contracted services and their administrative management. • Compliance with legal obligation (art. 6.1.c GDPR): for the preservation of invoices, accounting books and tax obligations (Spanish General Tax Law, Commercial Code). • Legitimate interest (art. 6.1.f GDPR): for B2B commercial prospecting on public professional data, loyalty of existing customers and website security. You may withdraw your consent at any time without this affecting the lawfulness of processing prior to withdrawal.

  5. 05

    Retention periods

    We keep data for the following periods: • Contact form and inquiry data: up to 24 months after the last interaction, unless the user requests earlier deletion. • Customer data (contractual relationship): for the term of the contract and, thereafter, for the minimum legal periods required by tax regulations (6 years, Spanish Commercial Code) and limitation of civil actions (5 years). • Newsletter data: until the user unsubscribes. • B2B prospecting data: until the data subject exercises the right to object or the legitimate interest ceases. • Cookie data: according to the individual periods detailed in the Cookie Policy. Once the applicable periods have elapsed, data is securely deleted or anonymized.

  6. 06

    Recipients and international transfers

    We do not share data with third parties except by legal obligation or when necessary to provide the service. The main recipients are service providers acting as processors, bound by contracts compliant with article 28 GDPR: • Transactional email and newsletter providers (sending communications). • Web analytics platforms (Google Analytics 4, Microsoft Clarity, Hotjar, PostHog) — to understand site usage. • Advertising and conversion platforms (Google Ads, Meta, LinkedIn, TikTok) — to measure campaign performance. • CRM and commercial tools (HubSpot) — to manage lead and customer relationships. • Scheduling platforms (Calendly or similar) — to manage meetings. • Hosting, domain and CDN providers — to operate the website. • Tax, accounting and legal advisors — to comply with legal obligations. International transfers: some providers (Google, Meta, LinkedIn, TikTok, HubSpot, among others) have servers in the United States or other countries outside the European Economic Area. In those cases, transfers are made under the Standard Contractual Clauses approved by the European Commission or, when applicable, under the Trans-Atlantic Data Privacy Framework following the adequacy decision of July 2023.

  7. 07

    Data subject rights

    As data subject you have the following rights, recognized by GDPR and LOPDGDD: • Access: know what data we process about you. • Rectification: correct inaccurate or incomplete data. • Erasure («right to be forgotten»): delete your data when it is no longer necessary or you withdraw consent. • Objection: object to processing based on legitimate interest or to commercial communications. • Restriction: request the restriction of processing in certain cases. • Portability: receive your data in a structured, commonly used format, or request its direct transmission to another controller. • Withdrawal of consent: at any time, without affecting the lawfulness of prior processing. • Not to be subject to automated decisions with significant legal effects.

  8. 08

    How to exercise your rights

    To exercise any of your rights, send an email to info@elevam.es indicating: • The right you wish to exercise. • Your name and surname. • A copy of your ID, NIE or passport (to verify your identity). • The address to which you want us to send the response (email or postal). We will respond within a maximum period of one month from receipt of your request. If the request is complex or we receive many, we may extend the period by another two months, notifying you in advance. The exercise of these rights is free, unless the requests are manifestly unfounded or excessive.

  9. 09

    Complaint before the supervisory authority

    If you consider that the processing of your personal data infringes the regulations, or that we have not adequately addressed the exercise of your rights, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD): Address: C/ Jorge Juan, 6, 28001 Madrid (Spain) Phone: +34 901 100 099 / +34 912 663 517 Web: www.aepd.es

  10. 10

    Security

    We apply the technical and organizational measures appropriate to ensure the security, confidentiality and integrity of personal data, considering the state of the art, the scope of processing and the associated risks. These measures include, among others: encryption of communications (HTTPS), role-based access control, periodic backups, incident monitoring and team training in data protection. In the event of a security breach that may pose a risk to the rights and freedoms of data subjects, we will notify the AEPD within a maximum of 72 hours and, where appropriate, the affected data subjects.

  11. 11

    Changes to the policy

    We may update this policy to reflect regulatory, provider or purpose changes. We will always publish the version in force on this same website, indicating the date of last update at the beginning of the document. For substantial changes affecting data subjects' rights, we will communicate them by email or another appropriate means when we have the contact details.