1. Data Controller
Tyron Ventures S.L.
Tax ID (CIF): B23886781
Registered address: Avenida de Madrid, 9, 08028 Barcelona, Spain
Email: tamayo@tyron.es
2. Personal Data We Collect
We collect data in the following situations:
- Contact form: full name, email address, phone number, business website URL, number of employees, approximate annual revenue and project description.
- Browsing: anonymised IP address, pages visited, session duration and device information, collected via analytics cookies (only with your consent).
- Communications: the content of messages you send us by email.
3. Purposes and Legal Basis
- Handling your enquiry or quote request — legal basis: performance of pre-contractual measures at the data subject's request (Art. 6(1)(b) GDPR).
- Web analytics (Google Analytics 4, Microsoft Clarity) — legal basis: user consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time from our cookie preferences panel.
- Advertising and retargeting (Meta Pixel, LinkedIn Insight Tag) — legal basis: user consent (Art. 6(1)(a) GDPR).
- Commercial communications by email — legal basis: explicit consent provided via the dedicated checkbox in the contact form (Art. 6(1)(a) GDPR).
4. Retention Periods
- Contact form data is retained for 3 years from the last communication, in line with the statute of limitations under Spanish commercial law.
- Web analytics data is retained according to each platform's settings: Google Analytics 4 (up to 14 months), Microsoft Clarity (13 months).
- If you have consented to commercial communications, your data is retained until you withdraw that consent.
5. Recipients and Data Processors
Tyron Ventures S.L. may share your data with the following service providers, acting as data processors under GDPR-compliant agreements:
- Google LLC (Google Analytics 4, Google Tag Manager) — United States.
- Meta Platforms Ireland Limited (Meta Pixel) — Ireland (EU).
- Microsoft Corporation (Microsoft Clarity) — United States.
- LinkedIn Ireland Unlimited Company (LinkedIn Insight Tag) — Ireland (EU).
We do not sell or transfer your data to third parties for their own purposes.
6. International Data Transfers
Services provided by Google LLC and Microsoft Corporation involve transfers of data to the United States. These transfers are carried out under the EU-U.S. Data Privacy Framework, adopted by the European Commission in July 2023, and Standard Contractual Clauses approved by the European Commission, ensuring a level of protection equivalent to that required within the European Economic Area.
7. Your Rights
Under the GDPR, you have the right to:
- Access: obtain confirmation of whether we process your data and receive a copy.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure: request deletion of your data when it is no longer necessary for the purpose for which it was collected, among other grounds.
- Restriction: request that we suspend processing of your data in certain circumstances.
- Portability: receive your data in a structured, commonly used, machine-readable format.
- Objection: object to processing based on legitimate interests.
- Withdraw consent at any time, without affecting the lawfulness of prior processing.
To exercise any of these rights, email us at tamayo@tyron.es with the subject "GDPR — [right you wish to exercise]", enclosing a copy of your identity document. We will respond within one month.
If you believe your data is being processed in breach of the GDPR, you have the right to lodge a complaint with the Spanish Data Protection Authority (www.aepd.es).
8. Data Security
We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or accidental disclosure, in accordance with Article 32 of the GDPR.
9. Minors
Our services are not directed at persons under the age of 14. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, please notify us at tamayo@tyron.es so we can delete it.
10. Changes to This Policy
We may update this privacy policy to reflect changes in legislation or our services. We will notify you of significant changes via a prominent notice on the website. The version published on this page is always the current one.