Last reviewed: 19 October 2026
Privacy policy
Scope: this policy covers only the personal data processed on this website (getalmenara.com): the contact form, visit statistics, the identification of companies that visit the website and the technical logs of its operation. Data stored inside the Almenara platform is governed by the contract with each customer and by the product's own privacy policy.
1. Data controller
- Controller: José Ramón Santos Crespo, a natural person who provides services under the name Almenara.
- Tax ID (NIF): 54195670B
- Address: Plaza de la Encina 8, 2.º B, 28760 Tres Cantos (Madrid)
- Contact for any privacy matter: hola@getalmenara.com
There is no data protection officer: the controller is not required to appoint one (Article 37 GDPR and Article 34 of Spanish Organic Law 3/2018, LOPDGDD). Any question about your data is handled directly by the controller at hola@getalmenara.com.
2. Processing activities, purposes and legal bases
| Processing | Purpose | Legal basis | Data |
|---|---|---|---|
| Contact form | Respond to your request for information, a meeting or a proposal | Your consent (Art. 6(1)(a) GDPR) | Name, email, company, role, message |
| Visit statistics (Plausible, cookieless) | Measure, in aggregate, which pages are visited, where visits come from (including the utm_ campaign tags in links) and which content and actions draw interest, to improve the website and our offer | Legitimate interest in measuring the website's audience anonymously (Art. 6(1)(f) GDPR). It doesn't need your consent: it neither stores nor reads anything on your device (Art. 22(2) of Spain's LSSI) | Pages visited, referring page, browser, operating system, device type, and approximate country and city. Your IP and browser are only used to compute a code that changes every day and is deleted after 24 hours; the IP is not stored |
| Company identification (Dealfront) | Know which companies visit the website and which pages they view, to prepare sales contact with those organisations | Your consent (Art. 6(1)(a) GDPR and Art. 22(2) LSSI), only if you accept "Marketing" in the cookie banner | The IP you browse from (to identify the organisation the network belongs to), pages viewed, date and time, browser, the identifier in the _lfa cookie and, if you submit the contact form, the fact that you submitted it and the names of its fields, never what you write. It identifies companies, not people |
| Technical logs | Security, abuse detection, incident resolution | Legitimate interest in the security of the site (Art. 6(1)(f) GDPR) | IP, date and time, requested resource, user agent |
The required fields are those needed to reply to you: if you leave them empty, we cannot respond. You can withdraw your consent at any time, without affecting processing carried out before; for Dealfront, from "Cookie preferences" in the footer. You can object to visit statistics (Art. 21 GDPR) by writing to us or by blocking their script in your browser; since they don't identify you, we can't find or delete "your" visits within them.
There are no user accounts or newsletters on this site. If either is introduced, this policy will be updated before it goes live.
3. Retention periods
- Contact form: up to 24 months from the last contact, or earlier if you ask for erasure.
- Visit statistics: only aggregate figures are kept, for as long as the service runs; the daily code is deleted after 24 hours (see the cookie policy).
- Company identification: Dealfront keeps the visit history for as long as the service runs (currently, the last 7 days); what we copy out (company name and pages viewed, no data about people) is kept for up to 24 months. The
_lfacookie lasts 12 months. - Technical logs: up to 12 months, unless a legal obligation or an ongoing security investigation requires longer retention.
4. Recipients
Data is not disclosed to third parties, except where required by law. It is processed on the controller's behalf, as processors, by the website host (Clever Cloud), the form delivery service and the mailbox where messages arrive (Microsoft 365), visit statistics (Plausible) and company identification (Dealfront, only with your consent). Details, including each one's country and safeguards, are in the subprocessors list.
5. International transfers
Microsoft 365 belongs to a United States company, so the data it processes may leave the European Economic Area. That transfer relies on the European Commission's adequacy decision for the EU-US Data Privacy Framework and on the standard contractual clauses of its processing agreement (Articles 45 and 46 GDPR). Its safeguard is stated in the subprocessors list. Dealfront and Plausible are in the European Union and store data in the EU; if Dealfront uses any provider of its own outside the EU, it does so under the European Commission's standard contractual clauses (Article 46 GDPR). The other providers of this website are in the European Union.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and the right not to be subject to automated individual decisions, at any time by writing to hola@getalmenara.com. Or by post to Plaza de la Encina 8, 2.º B, 28760 Tres Cantos (Madrid). See Data protection for the full procedure.
If you believe your data has not been processed in accordance with the law, you can lodge a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es, or with the supervisory authority of the Member State where you live, work or where the alleged infringement took place (Art. 77 GDPR).
7. Automated decisions
No automated decisions or profiling with legal or similarly significant effects on you take place on this site.
8. Changes to this policy
This policy may be updated to reflect legislative changes or changes to the site itself. The last-reviewed date appears at the top of this document.