Now accepting Q2 2026 mandates · Limited capacity
Legal

Privacy Policy

Effective date: 2026-06-06

Data controller

Qualiax is the data controller for personal data collected through this website. Qualiax is an individual advisory practice based in Spain. Contact: pablped@gmail.com.

What we collect

Contact form. When you submit the contact form we collect: your name, email address, and the details you provide (company name, message, selected practice area, and budget range). Submission is entirely voluntary.

Site analytics. We use Vercel Analytics to understand how the site is used. Data collected includes page views, geographic region (country level), device type, and referrer. This data is anonymous — see the Cookie Policy for details on why no consent banner is required.

Why we collect it

Contact form. To review and respond to your inquiry. Legal basis: legitimate interest in communicating with prospective clients, supplemented by your consent given by submitting the form.

Analytics. To understand site performance and improve content. Legal basis: legitimate interest. No identifiable data is processed.

How long we keep it

Contact form submissions are stored in our email inbox and retained until you request deletion. Analytics data is retained according to Vercel's data retention policy (see Vercel's privacy documentation for current terms).

Who has access

Only the Qualiax operator has direct access to form submissions. We use the following service providers who process data on our behalf:

  • Resend — email delivery service that routes form submissions to our inbox. EU-based infrastructure.
  • Vercel — hosting platform and analytics provider. US/EU infrastructure. No identifiable data is processed by Vercel Analytics.

These providers act as data processors under contractual obligations and may not use data for their own purposes.

International transfers

Data may be processed through Vercel infrastructure in the United States. Vercel uses Standard Contractual Clauses (SCCs) as the transfer mechanism for EU personal data. Resend processes data within the EU.

Your rights

Under GDPR and applicable Spanish law, you have the right to: access your personal data, correct inaccurate data, request deletion, receive your data in a portable format, object to processing, and request restriction of processing.

To exercise any of these rights, email pablped@gmail.com. We will respond within 30 days.

Supervisory authority

If you believe your rights have not been respected, you may lodge a complaint with Spain's data protection authority, the Agencia Española de Protección de Datos (AEPD), at aepd.es, or with the supervisory authority in your country of residence.

No automated decision-making

We do not use automated decision-making or profiling based on personal data. All responses to inquiries involve human review.

Children

This site is not directed at users under 16. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, contact us immediately for deletion.

Changes to this policy

We may update this policy as our practices or legal requirements evolve. The effective date shown at the top of this page reflects the most recent revision. Continued use of the site constitutes acceptance of the updated policy.