Privacy Policy
⚠️ Draft pending legal review.
This is a courtesy English translation. In the event of any discrepancy, the Spanish-language version prevails for all legal purposes.
1. Data Controller
Zendai Consulting, S.L. (Tax ID B75740142), with registered address at Plaza de la Solidaridad nº 12, 29002 Málaga and contact email miguel@laskurain.es, is the controller of the personal data collected through laskurain.es. This policy is drafted under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
2. Data we collect and why
This website only collects the data the user voluntarily provides through two channels: the contact form (name, role, company, email, phone and message) and the brand diagnosis questionnaire (the questionnaire answers and the contact details the user provides). This data is stored in the site's own database (same controller, on an OVH server in the European Union). To measure traffic, the site uses Umami, a cookieless web analytics tool that requires no consent: it collects usage statistics in an aggregated, anonymous way, without identifying visitors or tracking them across sites. The site uses no tracking or advertising cookies and does not build profiles.
3. Purpose
Data is used solely to respond to the request, deliver the brand diagnosis and maintain the necessary communication. It is not used for any other purpose or for marketing communications without prior consent.
4. Legal basis
The legal basis is the consent of the data subject, given by submitting the form or questionnaire and ticking the acceptance box, as well as pre-contractual measures taken at the data subject’s request.
5. Retention
Data submitted through the forms is kept for a maximum of 24 months from the last contact, after which it is deleted or blocked, unless a legal obligation requires keeping it longer. In any case, data is kept only for as long as necessary to handle the request and for legally required periods, and is then blocked until any liabilities lapse.
6. Processors
To provide the service we rely on processors acting under GDPR safeguards: Brevo (transactional notification email), Cloudflare Turnstile (spam protection for the forms) and Notion (logging of brand-diagnosis answers). Form processing and website hosting run on our own server (Payload) at OVH, with servers in the European Union.
7. Rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to miguel@laskurain.es, proving your identity. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).