Privacy Policy
This Privacy Policy explains how IACOM processes personal data when you visit this website, contact us or subscribe to our newsletter.
1. Who operates this website
For the purposes of Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), the controller responsible for personal data processed through this website is:
Name: Iván Roldán Núñez
NIF: 53272344C
Trade name: IACOM
Email: legal@iacom.dev
IACOM is currently a trade name used by Iván Roldán Núñez and is not a separate legal entity.
Full identification and contact details of the website operator, including tax identification and address information, are available in our Legal Notice and Terms of Use.
2. Personal data we process
Depending on how you use this website, we may process the following categories of personal data.
2.1. Newsletter subscriptions
If you subscribe to the IACOM newsletter, we process:
- your email address;
- the date and time of your subscription;
- information necessary to record and demonstrate your consent, such as the source of the subscription and the version of the information presented to you.
Limited technical information may also be processed where necessary to prevent fraudulent subscriptions, maintain security or demonstrate that valid consent was obtained.
2.2. Communications and enquiries
If you contact IACOM by email or through any communication channel made available on the website, we may process:
- your name, if provided;
- your email address;
- the content of your message;
- any other information you voluntarily provide.
Please do not send sensitive personal information unless it is strictly necessary for the purpose of your communication.
2.3. Website analytics
If you expressly consent to analytics cookies, IACOM uses Google Analytics 4 to obtain statistical information about how visitors use the website.
Depending on the configuration and information made available by Google Analytics, this may include information such as:
- pages visited;
- approximate geographic location;
- browser and device information;
- session information;
- interactions with the website;
- a pseudonymous browser or device identifier.
Google Analytics is not activated for analytics purposes until you have given the corresponding consent through the cookie management system.
Further information is available in our Cookie Policy.
2.4. Technical and security information
When the website is accessed, limited technical information may also be processed where necessary to deliver the website, maintain its security, prevent abuse and diagnose technical problems.
This may include information such as IP address, date and time of requests, browser information and technical logs.
3. Purposes and legal bases
We process personal data for the following purposes.
Voluntary provision of data: Subscribing to the newsletter and sending general enquiries are voluntary. An email address is necessary to send newsletter updates or reply by email. If you do not provide it, we cannot provide the corresponding service or response. There is no legal obligation to subscribe, and subscription is not required to access publicly available website content.
Newsletter
Purpose: To send email updates and news about IACOM, its projects, products and services, within the scope explained when you subscribe.
Legal basis: Your consent.
You may withdraw your consent at any time, without charge, through the unsubscribe link included in each email or by contacting legal@iacom.dev. Withdrawal does not affect processing lawfully carried out before it.
Enquiries and communications
Purpose: To respond to messages, questions, requests or potential business enquiries.
Legal basis: Article 6(1)(b) GDPR where processing is necessary to take steps requested by you before entering into a contract. For general enquiries that do not concern a potential contract, Article 6(1)(f) GDPR may apply on the basis of the controller's legitimate interest in receiving and responding to communications.
Website analytics
Purpose: To understand how the website is used, obtain aggregated statistics and improve its content and performance.
Legal basis: Your consent.
Analytics processing does not take place unless the required consent has been provided.
Website operation and security
Purpose: To operate the website, ensure technical availability, maintain security, prevent abuse and investigate technical incidents.
Legal basis: Article 6(1)(f) GDPR, based on the controller's legitimate interest in ensuring website availability, preventing misuse and protecting information systems, subject to the applicable balancing of interests.
4. Data retention
IACOM retains personal data only for as long as necessary to fulfil the purposes for which it was collected, in accordance with the principles of data minimisation and storage limitation established by the GDPR.
Newsletter subscriptions
Email addresses and associated subscription information are retained until the subscriber withdraws consent or unsubscribes.
After withdrawal, the email address will be removed from the active mailing list without undue delay.
Limited records demonstrating the original consent, its withdrawal and compliance with applicable obligations may be retained for the period necessary to address potential legal claims or demonstrate compliance, taking into account the applicable limitation periods.
Such records will not be used for further marketing communications.
Enquiries and communications
Personal data provided through email communications or contact requests will normally be retained until the enquiry has been resolved.
Unless continued retention is necessary for a follow-up request, potential legal claim or applicable legal obligation, general enquiry records will be deleted or anonymised within 12 months after the last relevant communication.
Where an enquiry leads to a contractual relationship, the applicable contractual and statutory retention requirements will apply.
Website analytics
Where the visitor has consented to Google Analytics 4, analytics data will be retained according to the configured retention settings.
The retention period for user-associated event data is 14 months, provided that this setting remains configured in the Google Analytics property.
Aggregated statistics that no longer constitute personal data may be retained for longer periods.
Technical and security logs
Routine technical and security logs will normally be retained for a maximum of 30 days, unless a longer retention period is necessary for security incidents, legal claims or applicable legal obligations.
Logs associated with suspected security incidents, abuse, legal claims or legally required investigations may be retained for a longer period where necessary and proportionate.
Periodic review
IACOM periodically reviews the personal data it holds and deletes or anonymises information that is no longer necessary for the purposes described above.
5. Recipients and service providers
IACOM may use third-party service providers where necessary to operate the website and related services.
These providers may include:
- website hosting and infrastructure providers;
- technical and security service providers;
- analytics providers, including Google Analytics where you have consented to analytics cookies.
Hosting and data management
The IACOM website, including its application and associated services, is hosted on infrastructure provided by Namecheap, Inc., with servers located in the United States.
Data submitted through the newsletter subscription form is stored in a MySQL database managed by the website operator, using the contracted hosting infrastructure.
No external email marketing platform is currently used. Subscriptions are managed directly, and informational communications will be sent manually and only to those who have agreed to receive them.
Namecheap acts as an infrastructure provider and data processor under the terms set out in its data processing agreement.
Where service providers process personal data on behalf of IACOM, the processing is governed by applicable data processing agreements in accordance with Article 28 GDPR. Personal data may also be disclosed where required by law or to competent public authorities.
Personal data is not sold to third parties.
6. International data transfers
IACOM uses third-party technology providers to operate this website, manage newsletter subscriptions and provide website analytics.
Certain personal data may be stored, accessed or otherwise processed outside the European Economic Area (EEA), including in the United States.
Website hosting and database
The website and its associated MySQL database are hosted using infrastructure provided by Namecheap, Inc., with servers located in the United States.
Personal data submitted through the newsletter subscription form, together with relevant technical information, may therefore be processed in the United States.
IACOM's contracted Namecheap hosting services are covered by Namecheap's applicable Data Processing Addendum. Where relevant, international transfers of personal data from the EEA are subject to the European Commission's Standard Contractual Clauses incorporated into that agreement, together with any supplementary measures required under applicable law. Further information is available in Namecheap's Data Processing Addendum.
Google Analytics
Subject to the visitor's prior consent, IACOM uses Google Analytics 4 to obtain statistical information about website usage.
Google may process personal data internationally in accordance with the applicable Google Analytics data processing terms.
Transfers of personal data to Google LLC in the United States in connection with Google Analytics 4 are covered by the European Commission's adequacy decision under the EU-U.S. Data Privacy Framework where the relevant processing falls within Google LLC's valid certification. Other relevant international transfers are subject to the Standard Contractual Clauses incorporated into Google's applicable data processing terms where required. Further information is available in Google's international data transfer information.
Data protection safeguards
International transfers of personal data must comply with Chapter V of Regulation (EU) 2016/679 (GDPR). The specific mechanism relied on for each provider is described above.
Visitors may request information about the safeguards applicable to their personal data, including how to obtain a copy of the relevant safeguards or where they are available, by contacting legal@iacom.dev.
7. Newsletter subscription and consent
Subscription to the IACOM newsletter is voluntary and free of charge.
By subscribing, users agree to receive email communications about IACOM's development, project updates, upcoming product launches and related news.
Newsletter subscriptions are based on the user's freely given, specific, informed and unambiguous consent.
Subscription is not required to browse the website or access its publicly available content.
IACOM maintains appropriate records of subscription consent and provides a free and straightforward unsubscribe mechanism in each newsletter.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Email addresses collected for newsletter subscriptions will not be used for unrelated marketing purposes without an appropriate legal basis.
Where consent is the legal basis for newsletter communications, the controller must be able to demonstrate that valid consent was obtained, in accordance with Article 7 GDPR.
This may include the subscription date and time, the subscription source or form, and the version of the information presented when consent was obtained.
Where a confirmation mechanism such as double opt-in is used, the relevant confirmation information may also be retained.
These records are used for accountability and compliance purposes and not as an independent basis for continuing to send communications after consent has been withdrawn.
8. Cookies and similar technologies
This website uses cookies and similar technologies.
Strictly necessary technologies may be used where required for the operation, security or functionality expressly requested by the user.
Analytics technologies, including Google Analytics, are used only after the user has provided the corresponding consent through the cookie management system.
You can review or change your choices at any time through the cookie settings mechanism available on the website.
For further information, please read the Cookie Policy.
9. Your data protection rights
Subject to the conditions and limitations established by applicable data protection law, you may exercise the following rights:
- request access to your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of your personal data;
- request restriction of processing;
- object to processing where the processing is based on legitimate interests;
- request portability of your data where applicable;
- withdraw your consent at any time where processing is based on consent.
Right to object to direct marketing: You also have the right to object at any time, free of charge, to the processing of your personal data for direct marketing purposes.
If you exercise this right, IACOM will stop processing your personal data for those purposes.
To exercise your rights, contact:
Requests will be handled within the periods established by the GDPR, generally within one month of receipt, subject to any legally permitted extension. Additional information may be requested where there are reasonable doubts about the requester's identity.
10. Right to lodge a complaint
If you consider that your personal data has been processed unlawfully, you may lodge a complaint with a competent supervisory authority, without having to contact IACOM beforehand.
In Spain, the supervisory authority is the Agencia Española de Protección de Datos (AEPD), whose website is www.aepd.es.
You may also contact IACOM at legal@iacom.dev to raise any concern directly. Doing so is optional and does not limit your right to contact the supervisory authority.
11. Data security
IACOM applies reasonable technical and organisational measures appropriate to the nature of the data processed and the risks associated with the processing.
However, no Internet transmission or information system can be guaranteed to be completely secure.
12. Data relating to minors
This website and the IACOM newsletter are not specifically directed at children.
Where processing relies on consent provided by a child, the rules on children's consent under applicable law must be observed. In Spain, Article 7 LOPDGDD generally sets the relevant age at 14 years, without prejudice to other applicable requirements.
If you believe that a child has provided personal data through this website inappropriately, please contact legal@iacom.dev.
13. Changes to this Privacy Policy
IACOM may update this Privacy Policy where necessary to reflect changes to the website, its services, the technologies used or applicable legal requirements.
The date shown at the beginning of this document indicates when the policy was last updated.
Material changes affecting the way personal data is processed will be communicated where required by applicable law.
14. Contact
For legal or general enquiries relating to this website:
Iván Roldán Núñez, operating under the name IACOM
Email: legal@iacom.dev
Full identification and contact details, including tax identification and address information, are available in our Legal Notice and Terms of Use.