Privacy Policy

1. Data controller

• Responsible party: Grupo Gampi Globales S.L.
• CIF: B22457964
• Address: 13 Pere Dezcallar i Net Street, 6th floor, flat 5, 07003 Palma, Balearic Islands, Spain
• Telephone: +34 971 77 64 77
• Contact email: [email protected]
• Competent supervisory authority: Spanish Data Protection Agency (AEPD) – www.aepd.es

2. Data we process

Depending on how you interact with us (website, email, WhatsApp, contracts, etc.), we may process:

• Identification details and contact information: first name, surname, email address, telephone number, company, job title.
• Professionals/sales staff: information contained in enquiries, quotations, meetings or correspondence.
• Web navigation, analytics and interaction: IP address, device, operating system, pages visited, clicks, scrolls, heatmaps, session views and analytics events (only if you accept the analytics cookies via the banner).
• Preferences: language, cookie settings and other technical preferences (e.g., in localStorage).
• Contracts and invoicing (customers): Tax identification number (NIF/CIF), company name, registered address, billing and payment contact details, and the information required to provide services ERP, website, SaaS or Verifactu.

We do not intentionally collect or process special categories of data via this website.

3. Purposes of data processing

• Enquiries and contact details: handle enquiries, quotes and queries.
• Pre-contractual and contractual relationships: drafting and finalising contracts, registering clients/users, invoicing and tax obligations.
• Provision of services and technical support: website management and support, ERP, SaaS, Verifactu and web hosting.
• Commercial communications and marketing (non-intrusive): regarding Grupo Gampi services where there is a pre-existing relationship or consent. You can unsubscribe at any time.
• Web analytics, optimisation and measurement: We use Google Analytics 4 and Microsoft Clarity to understand how you use and interact with the website through behavioural metrics, heatmaps and session replays; to improve content, usability, performance and security – provided you accept analytics cookies.
• Advertising and campaign measurement: in partnership with Microsoft Advertising to measure the popularity of products and services, online activity and the effectiveness of advertising campaigns, provided you give your consent.
• Compliance and security: accounting and tax obligations, and the protection of systems and infrastructure.

4. Legal basis

• Consent: contact forms, unsolicited commercial communications, and non-essential analytical, measurement and advertising cookies.
• Performance of a contract or pre-contractual measures: quotes, proposals, service provision (ERP, website, SaaS, Verifactu, hosting, support).
• Compliance with legal obligations: accounting, taxation, invoicing and applicable regulations (AEAT, VeriFactu, etc.).
• Legitimate interest: network and system security; improvement of the service and digital experience without profiling, with legal implications; commercial communications to existing customers regarding similar services, with the right to opt out.

No individual automated decisions with significant legal implications are made.

5. Retention periods

• Contact details and enquiries: for the duration of the process and, where applicable, for as long as the business relationship continues or until you request their deletion.
• Contracts and invoicing: mandatory statutory retention periods (usually 5 to 10 years, depending on tax and commercial regulations).
• Marketing communications: until consent is withdrawn or revoked.
• Web analytics (GA4, Microsoft Clarity and associated Microsoft Advertising technologies): in accordance with the retention settings and for as long as you maintain your consent.
• Consent records: for as long as they are required to demonstrate regulatory compliance.

Once the time limits have expired, they will be securely deleted or anonymised.

6. Recipients and transfers

We may disclose data to:

• Suppliers who require access in order to provide services (hosting, support, communications, analytics, ERP/SaaS/Verifactu services) as data processors (Article 28 of the GDPR).
• Government bodies and authorities where there is a legal obligation (AEAT, judicial bodies, supervisory authorities, etc.).

Some providers (e.g. Google LLC for GA4 and Microsoft Corporation for Microsoft Clarity/Microsoft Advertising) may transfer data outside the EEA. Appropriate safeguards are in place (standard contractual clauses or other mechanisms recognised by the regulations).

7. Rights of data subjects

You may exercise your rights of access, rectification, erasure, restriction, objection, data portability and withdrawal of consent at any time.

Please send your application, together with proof of identity, to:
Email: [email protected]
Postal address: 13 Pere Dezcallar i Net Street, 6th floor, flat 5, 07003 Palma, Balearic Islands, Spain.

If you feel that your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

8. Safety measures

Grupo Gampi Globales S.L. implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or accidental or unlawful alteration, including:

• Communications encryption (HTTPS).
• Access control and credential management.
• Regular backups.
• Activity logging and system monitoring.
• Security incident response procedures.

We review and update these measures to maintain a level of security commensurate with the risk.

9. Cookies and analytics

The use of cookies and similar technologies is set out in detail in our Cookies Policy. We only use analytical cookies and equivalent technologies (e.g. Google Analytics 4, Microsoft Clarity and Microsoft Advertising) if you have given your consent via the relevant banner.

In particular, we work with Microsoft Clarity and Microsoft Advertising to understand how you use and interact with our website through behavioural metrics, heatmaps and session replays, with a view to improving and promoting our products and services. Website usage data is collected via first-party and third-party cookies and other tracking technologies to determine the popularity of products and services and online activity.

We also use this information to optimise the site, for security and fraud prevention purposes, and for advertising. You can withdraw your consent at any time via your browser settings or by deleting cookies/local storage. For further information on how Microsoft collects and uses your data, please see the Microsoft Privacy Statement.

10. Changes to the privacy policy

We may amend this policy to bring it into line with regulatory changes, the guidelines of supervisory authorities or changes to our data processing procedures. We will always publish the updated version on this page and indicate the date of the last update. If the changes are significant, we may also communicate them through other channels (email, notices on the website, etc.).