legal · version 1.0
Privacy policy
This policy explains what personal data this website collects, what we use it for, who we share it with and what you can do about it. It is written to be understood on first read.
In short: we only process the data you give us when you write to us, we use it solely to reply, we never sell it, and this website uses no cookies and no analytics.
1. Who is the data controller
The data controller is Insodia LLC, a limited liability company formed in the state of New Mexico (United States).
- Address
- 530b Harkle Road, Suite 100, Santa Fe, NM 87505, USA
- Registration number
- EIN 61-2065518
- Privacy email
- privacidad@insodia.com
- EU representative
- Oskar Laguillo, Calle Matilde de la Torre, 3, 39500 Cabezón de la Sal (Cantabria), Spain — art. 27 GDPR
We are a US company, but this website is aimed at people in the European Union. The General Data Protection Regulation therefore applies to us and we have appointed an EU representative, whom you can contact just as you would contact us.
2. What data we process and where it comes from
- Data you give us: when you send the contact form (name, phone or email, and your message) or write to us directly by email, phone or WhatsApp.
- Data generated by your visit: the IP address and technical data of each request, which the server logs for security. We do not use them to identify you or build profiles.
Nothing else. This website has no user accounts, embeds no third-party content and uses no analytics or advertising tools.
If you message us on WhatsApp, that service is provided by WhatsApp (Meta) under its own terms and privacy policy; we only process the data you send us in the conversation.
The only required data is what the form marks as such: without a way to contact you we cannot reply. Everything else is voluntary. Please do not include third-party data or special categories of data (health, beliefs, etc.) in your message; if you do, we will process them only to handle your enquiry, or delete them.
3. Why, on what basis and for how long
| Purpose | What data | Legal basis | How long |
|---|---|---|---|
| Answering your enquiry when you write to us via the form, by email, by phone or on WhatsApp. | Name, email or phone number, and whatever you tell us in your message. | Pre-contractual steps taken at your request (art. 6.1.b GDPR) and, otherwise, your consent. | Up to 2 years from the last contact. If you become a client, for the duration of the relationship plus statutory periods. |
| Protecting the website and the form against abuse, spam and fraud. | IP address and technical request data (date, page, browser). | Legitimate interest in the security of the service (art. 6.1.f GDPR). | Rate limiting keeps the IP in memory for a few minutes only. Server logs, a maximum of 12 months. |
| Complying with legal obligations and responding to requests from authorities. | Only what is strictly necessary in each case. | Legal obligation (art. 6.1.c GDPR). | As required by the applicable rule. |
When the period expires, we delete the data or irreversibly anonymise it. We do not use your data to send you advertising and we do not add you to any mailing list.
4. Who we share your data with
We do not sell, rent or hand over your personal data to third parties for their own commercial purposes.
It is only processed on our behalf, as processors bound by contract, by these providers:
| Provider | Purpose | Where |
|---|---|---|
| Resend, Inc. | Email delivery of form messages | United States |
| OVHcloud (OVH Groupe SAS) | Infrastructure of the server hosting the website, managed by us | European Union (France) |
We will also disclose data to the authorities where required by law, and to our legal or accounting advisers where strictly necessary.
5. International transfers
The website is hosted in the European Union. Even so, we are a US company and the delivery of form messages is handled by a US provider, so part of your data is processed there. To make those transfers lawful we rely on standard contractual clauses approved by the European Commission signed with our providers and, where the provider is certified, on the EU-US Data Privacy Framework, together with additional safeguards such as encryption in transit.
You can request a copy of the safeguards applied by writing to privacidad@insodia.com.
6. Your rights
- Access
- Know what data of yours we process and obtain a copy.
- Rectification
- Correct data that is inaccurate or incomplete.
- Erasure
- Ask us to delete it when it is no longer needed.
- Objection
- Object to processing based on our legitimate interest.
- Restriction
- Ask us to keep it but stop using it.
- Portability
- Receive the data you gave us in a reusable format.
- Withdraw consent
- At any time, without affecting prior processing.
To exercise them, write to privacidad@insodia.com stating which right you wish to exercise. We will reply within one month, extendable to two for complex requests, in which case we will let you know. It is free of charge. We may ask you to verify your identity, solely to avoid giving your data to someone else.
If you believe we have not handled your request properly, you can complain to the supervisory authority in your country. In Spain this is the Agencia Española de Protección de Datos (aepd.es), C/ Jorge Juan 6, 28001 Madrid.
7. Minors
This website is not aimed at children under 14 and we do not knowingly collect their data. If you are a parent or guardian and believe a child in your care has sent us personal data, write to privacidad@insodia.com and we will delete it without delay.
8. Security
We apply technical and organisational measures to protect your data: encrypted communications (HTTPS), access restricted to those who need it for their work, and periodic reviews. No system is infallible: if a security breach posing a risk to your rights were to occur, we will inform you and notify the supervisory authority within the deadlines required by the GDPR.
9. Cookies
This website uses no cookies, first-party or third-party, no analytics and no equivalent technologies. Details are in the cookie policy.
10. Changes to this policy
If we change it, we will update the version number and date shown at the top. If the website ever starts processing data differently — for example, by adding analytics — we will update this policy before doing so.
Legal notice ·Cookie policy ·App privacy (Spanish) ·privacidad@insodia.com