Privacy Policy

1. Identification of the Data Controller

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), you are hereby informed that:

• Data controller: R3ZON CONSULTING SL
• Trade name: R3ZON
• Tax ID (NIF/CIF): B93854065
• Registered address: Avenida Altos Hornos de Vizcaya, number 33, Barakaldo (48901)
• Registered data: Registro Mercantil de Bizkaia (Bilbao), sheet BI-88147, registration 1st, in electronic record
• Website domain: https://www.r3zon.com
• Contact email (personal data): info@r3zon.com

2. Scope of Data Processing

R3ZON CONSULTING SL only processes personal data when users provide it voluntarily: by writing to us by email or WhatsApp, or by booking a meeting through the online scheduling service linked from the website.

Merely browsing the website does not involve R3ZON processing identifying personal data. To know how many people visit the site and which pages they read, it uses aggregate, cookie-free analytics (Vercel Web Analytics) that does not identify visitors. The site does not use advertising or tracking cookies (see section 8).

3. Purpose of Processing

Data provided by email, WhatsApp or when booking a meeting will be processed exclusively for the following purposes:

• Responding to technical or commercial information requests.
• Managing communications related to the services offered.
• Assessing potential collaborations or professional relationships.
• Maintaining communications arising from a request initiated by the user.

Data will not be used to send unsolicited commercial communications or to create automated profiles.

4. Categories of Data Processed

The personal data processed will be exclusively what the user provides in their message or booking, which may include:

• First and last name.
• Email address.
• Company or organisation.
• Phone number (if provided or if you write via WhatsApp).
• Date and time of the booked meeting.
• Content of the message or any information the user provides.

R3ZON CONSULTING SL does not request or process special categories of personal data.

5. Legal Basis for Processing

The legal basis for processing is:

• The data subject’s consent, given when starting the communication or booking the meeting.
• The application of pre-contractual measures requested by the data subject.
• Legitimate interest in responding to professional enquiries addressed to the organisation.

Consent may be withdrawn at any time by writing to the email address indicated.

6. Data Retention

Data will be kept for as long as strictly necessary to handle the request and carry out the corresponding follow-up.

If a contractual relationship arises, data will be kept in accordance with the applicable legal periods.

7. Recipients and Data Processors

Data will not be disclosed to third parties except where legally required.

Meetings are booked through the Calendly service, linked from the website and opened in a new tab: the data the user enters there is processed by that service under its own privacy policy. Messages sent through WhatsApp are governed by that service’s terms.

The site is hosted by Vercel Inc., which also provides the web analytics service (Vercel Web Analytics) and acts as a data processor. This analytics does not use cookies or store anything on the device: it measures page views and referrers, and infers country, device type, browser and operating system. To tell visits apart without identifying anyone, it generates an anonymous, temporary identifier from request data, which changes daily and cannot be used to follow a user across days or across websites. The legal basis is R3ZON’s legitimate interest in understanding and improving how the site is used through aggregate statistics.

R3ZON CONSULTING SL may rely on technology providers (hosting, email, cloud services), acting as data processors under Article 28 of the GDPR, under contracts that guarantee the confidentiality and security of the information.

8. Cookies and Third-Party Content

This website does not set cookies. To measure visits it uses Vercel Web Analytics, aggregate analytics that does not use cookies, does not store information on your device and does not identify you, so it does not require consent. We do not use advertising or tracking cookies. The browser only stores what is strictly needed to work: the home page entry animation and the choice the user makes about cookies.

The map on the contact page loads images from OpenStreetMap, an external service that receives the user’s IP address. It only loads if the user accepts, and that choice can be changed at any time.

More information, and how to change your choice, in the Cookie Policy.

9. International Data Transfers

Some of the services linked from the website (online scheduling, WhatsApp, map, hosting and analytics) or some of the technology providers of R3ZON CONSULTING SL may be located outside the European Economic Area. In that case, the transfer relies on the appropriate safeguards provided for in the GDPR, such as the standard contractual clauses approved by the European Commission.

10. Rights of the Data Subject

The user may exercise the following rights:

• Access: obtain confirmation of whether personal data is being processed and access the data.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request the deletion of data (right to be forgotten).
• Objection: object to the processing of data.
• Restriction of processing: limit the processing of data.
• Portability: receive data in a structured format and transfer it to third parties.

Requests should be addressed to info@r3zon.com stating "GDPR Rights Request" in the subject line and including a valid proof of identity.

The data subject also has the right to file a complaint with the Spanish Data Protection Agency (AEPD) if they believe the processing does not comply with current regulations. More information at www.aepd.es.

11. Security Measures

R3ZON CONSULTING SL applies appropriate technical and organizational measures in accordance with the principle of proactive accountability (Art. 5.2 GDPR), aimed at guaranteeing:

• Confidentiality.
• Integrity.
• Availability.
• Resilience of the processing systems.

The measures adopted are proportionate to the nature of the service and the risk associated with the processing.

12. Amendments

R3ZON CONSULTING SL reserves the right to modify this policy to adapt it to regulatory or technical changes. Updates will be published on this same page.