Privacy notice
This notice explains how Altamira Strategic Partners SLU (“Altamira Automation”, “we”) uses personal data when you visit www.altamiraautomation.es, use our free assessment form, book a call, message us, or are contacted by us as a business contact. It is provided under the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Who is responsible for your data
- Controller
- Altamira Strategic Partners SLU (trading as Altamira Automation)
- Tax ID (CIF)
- B27652486
- Address
- Calle Alameda de Colón, 34, piso 14, puerta 5, 29001 Málaga (Spain)
- Privacy contact
- info@altamiraautomation.es
- Data protection officer
- Not appointed (not required for our activity). Send any question to the email above.
2. What we collect, why, and on what legal basis
Free assessment form and enquiries
Data: your name, email address, company name and website (optional), location, your multiple-choice answers, an optional note, the language of the page, the date and time of submission, and technical data your browser sends (such as your IP address), which our automation system records in its logs.
Purpose: to assess your answers, reply to you and, where relevant, arrange a call. Basis: steps taken at your request before a possible contract (Article 6(1)(b) GDPR). The form asks you to confirm you have read this notice; that confirmation is a record that you were informed, not the legal basis for replying to you.
Optional marketing emails
Data: your name and email address. Purpose: occasional emails about our services. Basis: your consent (Article 6(1)(a) GDPR and Article 21 of Spanish Law 34/2002, LSSI). We only do this if you tick the separate, optional box on the form or otherwise ask us to. You can withdraw consent at any time with the unsubscribe link in every email or by writing to us; withdrawing does not affect what we did before. We then keep your address on a do-not-contact list, only so that we do not email you again.
Booking a call
Our booking page is provided by Google (Google Calendar appointment scheduling). The details you enter (name, email, chosen time) are processed by Google and by us to hold the meeting. Basis: Article 6(1)(b) GDPR.
Business contacts we approach ourselves
If we contact you first by a channel other than email (for example LinkedIn or telephone), we use your professional details (name, role, firm, business contact details) from public professional sources such as your firm’s website or professional profile. Purpose: to offer our services to businesses that may benefit from them. Basis: our legitimate interest in promoting business-to-business services (Article 6(1)(f) GDPR; Article 19 LOPDGDD on professional contact data). We do not send commercial emails without prior consent. You can object at any time, and we will stop and keep only a do-not-contact entry.
Where we offer a WhatsApp contact option and you message our business number, we receive your phone number, your WhatsApp profile name and the content of your messages, and we reply within WhatsApp. WhatsApp (Meta) processes messages under its own terms and privacy policy. Purpose: to answer your enquiry. Basis: Article 6(1)(b) GDPR, as you start the conversation.
Visiting this website
Our web server and hosting provider log technical data (IP address, date and time, pages requested, browser type) to deliver and secure the site (legitimate interest, Article 6(1)(f) GDPR). Our pages load the Inter typeface from Google Fonts, so Google receives your IP address when a page loads. Cookies are covered in section 8.
3. AI-assisted assessment
The assessment is AI-assisted: your answers and note are processed by AI models to help us judge fit and draft a reply. It is a screening and drafting aid. It does not produce decisions with legal or similarly significant effects on you, and you can ask for a person to review any assessment. We do not authorise our AI providers to use your data to train their models.
4. Who receives your data
We do not sell personal data. We use the following service providers, which act on our behalf under data processing terms:
| Provider | What it does for us | Location |
|---|---|---|
| Elestio (servers operated by Netcup) | Hosts our automation system | Germany |
| Supabase | Database for enquiries and records | Frankfurt, Germany (EU) |
| Anthropic, OpenAI | AI processing for assessment and drafting | United States |
| Resend | Sends our emails | United States |
| HubSpot | Contact records (CRM) | EU and United States |
| Slack | Internal notifications used to review replies | EU and United States |
| Email, calendar and booking page; Google Fonts | EU and United States | |
| Our web hosting provider | Hosts this website | EU and United States |
| Meta (WhatsApp) | Only if you message us on WhatsApp | EU and United States |
We may also disclose data to professional advisers, and to public authorities where the law requires it.
5. Transfers outside the European Economic Area
Some providers above are based in, or may access data from, the United States. We rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses with additional safeguards. You can ask us for details at the email address above.
6. How long we keep your data
- Assessment form answers and enquiries: 12 months after our last contact, then deleted, unless you become a client.
- Clients: for the length of the contract and then for the periods the law requires (for accounting and tax records, generally up to six years).
- Marketing consent: until you withdraw it. After that, only your email address is kept on a do-not-contact list so we respect your choice.
- Business contacts we approach: no longer than 12 months after our last contact, unless you engage with us.
- WhatsApp messages: as for enquiries.
- Technical logs of our automation system, including IP addresses: for a short period for security and troubleshooting, then deleted.
7. Your rights
You can ask us for access to your data, correction, deletion, restriction of processing, portability, and you can object to processing based on legitimate interest. Where processing relies on your consent, you can withdraw it at any time. Write to info@altamiraautomation.es; we will reply within one month and may need to verify your identity. If you think we have not handled your data properly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es).
8. Cookies
This website does not set cookies of its own, and we do not use advertising, social-media or analytics cookies or any analytics service. Our web hosting provider previously ran a performance-monitoring script on this site that set three cookies (_tccl_visitor, _tccl_visit and _scc_session); we switched it off on 10 October 2026, so it no longer sets them. A browser that visited before then may still hold an old _tccl_visitor cookie, which expires on its own within a year and can be deleted in your browser settings.
Our booking page is provided by Google and our WhatsApp option by Meta; if you use them, they are governed by their own cookie and privacy terms. If we add cookies that need your consent, we will ask for it first.
9. Security
Connections to this site and to our systems are encrypted (HTTPS). Our database and automation system are hosted in the EU, access is restricted, and each provider is bound by data processing terms. No system is completely secure; if a breach affects you we will notify you and the authority where the law requires it.
10. Changes to this notice
We will update this page if our use of data changes. The date below shows the latest version.
Last updated: 10 October 2026