Privacy Policy

1. Introduction

At cdrusu, we take your privacy seriously. This Privacy Policy explains how we collect, use, share, and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and other applicable laws.

By using our services, you agree to the practices described in this policy.

2. Data Controller

3. Information We Collect

We collect different types of information depending on the services you use:

Personal Information

• Name and contact details
• Email address
• Phone number
• Billing address (for invoicing)
• Tax identification number

Technical Information

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent
• Cookies and similar technologies

Service Information

• Billing and payment information
• Service history
• Support tickets and communications
• Server logs (for hosting services)

4. How We Use Your Information

We use your personal data for the following purposes:

• Service delivery: To provide the consulting, development, and support services you've contracted
• Billing: To process payments, issue invoices, and manage accounting
• Communications: To send service notifications, technical updates, and respond to inquiries
• Improvement: To analyze service usage and enhance quality and experience
• Marketing: With your consent, to send information about relevant products and services
• Security: To detect and prevent fraud, abuse, or security issues

5. Legal Basis

We process your data based on:

• Contract execution: To deliver contracted services
• Legal obligation: To comply with tax and accounting requirements
• Consent: For marketing communications (revocable at any time)
• Legitimate interest: To improve services and ensure security

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described:

• Active client data: Duration of the business relationship
• Tax records: 6 years per Spanish law
• Marketing data: Until you withdraw consent
• System logs: 30 days, unless legally required otherwise

7. Data Sharing

We may share your data with:

• Service providers: Companies that help us deliver services (hosting, payments, email)
• Authorities: When required by law or to protect rights
• Professional advisors: Lawyers, auditors under confidentiality obligations

We never sell or rent your personal information to third parties for commercial purposes.

8. Your Rights

Under GDPR, you have the following rights:

To exercise these rights, contact us at privacy@cdrusu.com

9. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or destruction:

• SSL/TLS encryption for data transmission
• Firewalls and intrusion detection systems
• Regular encrypted backups
• Restricted access to personal data
• Ongoing data protection training

10. Cookies

We use cookies and similar technologies to improve your experience. For more information, see our Cookie Policy.

11. Children

Our services are not directed at individuals under 18 years of age. We do not knowingly collect data from minors. If we discover we have collected data from a minor, we will delete it immediately.

12. Policy Changes

We may update this privacy policy periodically. We will notify you of significant changes via email or through a notice on our website.

13. Contact