Kaironeo
ESEN
Kaironeo

Privacy policy

This policy describes how Francisco José Sánchez Utgé (KAIRONEO) processes personal data collected through the contact form, any follow-up communications and while browsing this site.

1. Data controller

  • Controller: Francisco José Sánchez Utgé (KAIRONEO)
  • Address: Carrer Folgueroles, 32, 08022 Barcelona, España
  • Privacy and rights contact: sanchez.utge@kaironeo.com

2. Scope

This policy applies to data collected through the contact form, to any communications that follow that request and to browsing the site, on the terms described here.

3. Categories of data

  • Name, company, work email and, optionally, a message.
  • Date, time and proof of the consent provided.
  • Language of the request.
  • Only if the visitor accepts the analytics cookie category: UTM parameters and referring page for that visit.

4. Purposes and legal bases

  • Handling your request and taking pre-contractual steps (art. 6(1)(b) GDPR).
  • Managing the relationship if one is formalised and complying with applicable legal obligations (art. 6(1)(b) and 6(1)(c) GDPR).
  • Technical security of the site and abuse prevention, on the basis of legitimate interest (art. 6(1)(f) GDPR).
  • Analytics via Google Analytics 4 (measurement ID G-DB18XKMBP3): runs only after prior explicit consent to the analytics category (art. 6(1)(a) GDPR). Before consent, gtag.js is not loaded, no analytics cookies are set and no data is sent to GA4. Names, emails, phone numbers and form message contents are never sent, and Google Signals and advertising features are not enabled. Declining analytics does not prevent using the site and the preference can be revoked at any time from “Cookie settings” in the footer; revoking it blocks GA4 and clears the _ga and _ga_<ID> cookies.

5. Obligation to provide data

The name, company, email and acceptance of this policy are required in order to respond. The message field is optional. Without the mandatory fields we cannot handle the request.

6. Retention

There is no general legal retention period for a simple lead: the minimisation principle applies and data is not kept longer than necessary.

  • Requests that do not become a commercial relationship: up to 12 months from the last interaction or closing, unless they need to be blocked to address potential claims.
  • Commercial relationship: for its duration and, afterwards, blocked during the applicable legal periods. Commercial and accounting records are kept for 6 years from the last entry (art. 30 of the Spanish Commercial Code), without prejudice to the general 4-year tax period (art. 66 LGT) and other applicable periods.
  • Proof of consent and rights exercise: for as long as needed to evidence compliance.
  • Google Analytics 4: user- and event-level data retention set to 2 months in the GA4 property. The _ga and _ga_<ID> cookies have a maximum browser lifetime of 2 years and are cleared when consent is withdrawn.

7. Recipients and processors

  • Lovable Cloud for hosting, database, authentication and server functions, with a Supabase-based backend and European region when configured.
  • Google Workspace / Gmail to receive and manage email related to requests.
  • Google Analytics 4 (Google Ireland Limited, with possible access by Google LLC) for aggregated usage measurement, executed only after explicit consent to the analytics category. This may involve international transfers covered by the safeguards described in section 8. See Google's privacy policy.
  • Public authorities only where a legal obligation applies.

8. International transfers

Some providers or sub-processors may process data outside the European Economic Area. In that case, transfers rely on adequacy decisions — including the EU-U.S. Data Privacy Framework where applicable to a certified recipient — or on the European Commission's Standard Contractual Clauses with supplementary measures where relevant. You can request information about the safeguards in place at sanchez.utge@kaironeo.com.

9. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction, portability and to withdraw consent at any time (without retroactive effect), and the right not to be subject to automated decisions with legal effects where applicable. We do not take automated decisions or carry out profiling with legal effects.

To exercise them, write to sanchez.utge@kaironeo.com. You have the right to lodge a complaint with the Spanish Data Protection Agency: www.aepd.es.

10. Data source, minors and security

The data comes from you. This is a professional site and is not directed at children under 14. We apply reasonable technical and organisational measures to protect the information.

11. Changes to this policy

This policy may be updated to reflect changes in the law or in the service. The current version is always published on this page with its last update date.

12. References

Last updated: 22 July 2026.