Data protection
Privacy Policy
Version 3 · Last updated: July 13, 2026.
1. Responsible
- Responsible: Jonas Alejandro Bemaman, self-employed worker.
- Trade name: IBITIC.
- NIF/NIE: Y9128986R.
- Home: PL 27 – Almarra 22, Polígono 10, Plot 188, Almarra, Onil (Alicante), Spain.
- Privacy Contact: info@ibitic.com.
2. Treatments performed
| Activity | Data and purpose | Legal basis | Conservation |
|---|---|---|---|
| Consultations and budgets | Name, email, telephone, location, service and message to respond, study needs and prepare a proposal. | Pre-contractual measures requested by the interested party (art. 6.1.b GDPR). For general queries, legitimate interest in addressing them (art. 6.1.f). | Up to 12 months from the last communication if there is no contract. If hired, it goes to the client's file. |
| Clients and facilities | Identification, contact, address, coordinates, availability, technical photographs, equipment data, incidents, budgets and billing to execute and maintain the service. | Execution of the contract (art. 6.1.b) and tax, accounting and consumer obligations (art. 6.1.c). | During the relationship and after, blocked or restricted during the applicable legal deadlines. Excessive technical data is deleted when it is no longer necessary. |
| Personnel selection | Identification, contact, experience, message and CV to evaluate the candidacy. | Pre-contractual measures (art. 6.1.b). Retention for future vacancies for 12 months is based on a separate, optional consent (art. 6.1.a). | During the open process. For future vacancies, up to 12 months if authorized; you can withdraw earlier. |
| Web analytics | Online identifiers and browsing data to compile usage statistics using Google Analytics 4. | Consent (art. 6.1.a RGPD and art. 22.2 LSSI). | According to the configuration described in cookie policy, with a maximum consent of 24 months. |
| Security | IP, date, requested resource and minimum technical data to prevent abuse, investigate errors and protect systems. | Legitimate interest in the security of the site (art. 6.1.f). | The minimum necessary technical period, normally not exceeding 90 days unless incident or legal obligation. |
3. Origin and mandatory nature
The data normally comes from the interested party himself. They can also come from clients, collaborators or companies that coordinate an installation; In that case, the corresponding information will be provided in the first communication when applicable.
The fields marked with an asterisk are necessary to respond or process the application. Failure to provide them prevents sending the form. Authorization for future vacancies is optional.
4. Recipients and suppliers
The data can be accessed, to the extent necessary: hosting, email, storage, support, billing and copy providers; installers and collaborators who participate in the service —including Intra Group when it intervenes in the project—; administrations, advice and authorities when there is a legal obligation.
IBITIC must limit access, document processing orders when appropriate and does not authorize collaborators to reuse data for their own incompatible purposes.
5. External services and transfers
If the user chooses WhatsApp, communication is done through Meta/WhatsApp. If you accept analytics, Google Tag Manager and Google Analytics are involved. These providers may process data outside the European Economic Area using the guarantees recognized by the GDPR that are applicable, such as adequacy decisions or standard contractual clauses.
Informational links: Google privacy and WhatsApp privacy for the EEA.
6. Rights
You can request access, rectification, deletion, opposition, limitation and portability, and withdraw consent without affecting the previous treatment, by writing to info@ibitic.com. As a general rule, you should not attach a copy of your ID; Additional information will only be requested to be provided if there are reasonable doubts about your identity.
You can also complain to the Spanish Data Protection Agency.
7. Security, decisions and minors
IBITIC applies controls proportionate to the risk, such as access restrictions, account protection, backups, form limits and incident procedures. No automated decisions with legal effects are made nor are profiles created using the forms. The services are not specifically directed to minors.