Privacy policy
Last updated:
1. Data controller
CableData Telecom, S.L. (CDTCOM), Tax ID B-83681866, C/ Madera 9A, Pol. Ind. La Ermita, 29603 Marbella, Málaga, Spain. Email: hello@cdtcom.com. We have not appointed a data protection officer; we handle privacy requests directly at that address.
2. What data we process
- Contact form: name, email, company, country, company size, service of interest and your message.
- Call booking: name, email and the date and time you choose, through TidyCal.
- Email: whatever you include in your messages.
- Form security: a hashed identifier of your IP address, never the IP in clear, to limit abusive submissions; and, when the contact page loads, Cloudflare Turnstile receives your IP address and technical browser signals to check that a person is submitting it.
- Browsing: basic site-usage signals, with no cookies or identifiers (page, approximate time, device type), which Google Analytics receives before you choose and uses only for aggregate statistical modeling; and, if you accept analytics cookies, site usage data through them (see Cookie policy).
3. Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your request and preparing a proposal | Your consent (Art. 6(1)(a) GDPR) and steps taken at your request before a contract (Art. 6(1)(b) GDPR) |
| Managing the calls you book | Pre-contractual steps (Art. 6(1)(b) GDPR) |
| Protecting the form against abuse (including anti-spam verification with Cloudflare Turnstile) | Legitimate interest in site security (Art. 6(1)(f) GDPR) |
| Aggregate statistics from basic signals without cookies or identifiers | Legitimate interest in understanding site usage anonymously (Art. 6(1)(f) GDPR); you can object by writing to hello@cdtcom.com |
| Measuring site usage with analytics cookies | Your consent (Art. 6(1)(a) GDPR) |
We do not make automated decisions or build profiles from your data.
4. How long we keep it
- Contact requests that don't lead to a contract: up to 12 months from the last contact.
- If you become a client: for the duration of the relationship, then for the legally required retention periods (tax and commercial).
- Form IP identifier: only for the submission-limit window.
- Analytics cookies: as described in the Cookie policy.
- Analytics data in Google Analytics (with or without cookies): 14 months.
5. Recipients and processors
We do not sell or share your data with third parties. To provide the service, we use these providers under data processing agreements:
- RunCloud — server management panel.
- Clouding.io — server hosting (Spain).
- DigitalOcean — server hosting.
- Qboxmail S.r.l. — email mailboxes and delivery of contact form messages (Italy).
- TidyCal — call booking (online scheduling).
- Cloudflare, Inc. — Turnstile, anti-spam verification of the contact form (United States).
- Google Ireland Limited — Google Analytics and Google Maps.
We only disclose data to authorities when required by law.
6. International transfers
Some of these providers may process data outside the European Economic Area. Where they do, transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. For Cloudflare, Inc. (Turnstile), the transfer relies on the EU-US Data Privacy Framework.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time, by writing to hello@cdtcom.com or to our postal address. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
We apply appropriate technical and organizational measures: encrypted connections (HTTPS), minimum access to systems and providers with data protection guarantees.
9. Changes
We may update this policy. The date of the last update appears at the top of the page.