Privacy policy

1. Data controller

• Controller: Okiou Consulting SL
• Tax ID (CIF): B55441281
• Address: Madrid, Spain
• Email: info@okiouconsulting.es

2. Purposes of processing

Personal data provided through the website is processed for the following purposes:

• Contact form: handling enquiries and requests for information or quotations submitted by the user.
• Email and phone: managing the commercial or pre-contractual relationship with the user.
• Usage statistics: understanding, in aggregate, the audience of the website (pages visited, country and browser type) in order to improve it. Visitors are not identified.

No profiling or automated decision-making is carried out with the data provided.

3. Legal basis

The legal basis for processing is the data subject's consent (art. 6.1.a GDPR), collected through the acceptance checkbox on the forms, and, where applicable, the application of pre-contractual measures at the data subject's request (art. 6.1.b GDPR). Usage statistics rely on the controller's legitimate interest in understanding and improving its website (art. 6.1.f GDPR), with no cookies or identifiers and no possibility of identifying the visitor.

4. Data retention

Data will be kept for the time necessary to handle the request and, subsequently, for the periods required by applicable legal obligations.

5. Recipients

Data is not disclosed to third parties except where legally required. The contact form is processed on Okiou Consulting’s own infrastructure in Microsoft Azure (Spain Central region) and the message is delivered to our Microsoft 365 mailbox. Microsoft acts as data processor as the provider of those services, with data processed within the European Union.

Usage statistics are obtained with Cloudflare Web Analytics, provided by Cloudflare, Inc., acting as data processor. The service uses no cookies or identifiers; the IP address is processed transiently to compute the statistics and is not retained. Cloudflare is certified under the EU-US Data Privacy Framework and applies standard contractual clauses as an additional safeguard.

6. Data subject rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to info@okiouconsulting.es, providing proof of identity. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security measures

Okiou Consulting SL applies appropriate technical and organisational measures to guarantee a level of security appropriate to the risk, in accordance with Article 32 of the GDPR.