This policy explains what personal data we process when you use the Locopolo website, why, on what legal basis, who we share it with and how to exercise your rights, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

Data controller

  • Owner: Naturpolo SL
  • Tax ID (NIF): B75196634
  • Address: Pol. Industrial Rekalde (ed. Irubide), 1 – Nave 16, 20160 Lasarte-Oria (Gipuzkoa)
  • Email: hola@thelocopolo.com

What data we process and why

  • Sales enquiry forms (sector pages and contact form): name, company, tax ID, phone, email, company website if you provide it, your message and the fields specific to each form. We also keep the language, the date and the IP address from which you accept this policy, as proof of consent. We use them to handle your request, contact you, send you the information or sales proposal you ask for and record it in our sales management system (CRM). When you submit the form we send you an automatic acknowledgement by email.
  • Other forms and emails you send us: the data you include, in order to reply.
  • Browsing: if you accept it in the cookie notice, usage statistics through Google Analytics. See the Cookie policy for details.

We only ask for the data needed for each purpose. We do not make automated decisions or build profiles with it.

Legal basis

  • Your consent, given by ticking the box on the form, which you can withdraw at any time.
  • Taking pre-contractual steps at your request: preparing and sending the information or proposal you ask for.
  • For analytics cookies, your consent in the cookie notice.

How long we keep it

For as long as needed to handle your request and, if a business relationship follows, for as long as it lasts. After that, the data is kept blocked for the periods during which legal liability may arise. If you withdraw your consent or ask for erasure, we stop using it for that purpose.

Who we share it with

We do not pass your data on to third parties unless required by law. The following providers have access to it only to provide their service, under a data processing agreement:

  • WP Engine (WPEngine, Inc.): website hosting.
  • Odoo (Odoo S.A., Belgium): our sales management system (CRM), where your request is recorded.
  • SendLayer: sending the automatic acknowledgement email.
  • hCaptcha (Intuition Machines, Inc.): spam protection on the forms that use it.
  • Google Analytics (Google Ireland Ltd.): usage statistics, only if you accept analytics cookies.

Some of these providers may process data outside the European Economic Area. In that case the transfer relies on the safeguards provided for in the GDPR, such as the adequacy decision for the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

Social networks

Locopolo has profiles on Instagram and LinkedIn. If you follow or interact with us there, the processing of your data is also governed by the terms and privacy policy of each network.

Your rights

You can ask us for access to your data, rectification or erasure, restriction of processing, object to it, request portability and withdraw your consent, without affecting the lawfulness of prior processing. Write to hola@thelocopolo.com stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask for additional information to confirm it.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Security

We apply appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access, alteration or destruction.

Accuracy of your data

Please make sure the data you give us is correct and up to date. If you give us someone else’s data, you must have informed them and have their permission.

Changes to this policy

We may update this policy to reflect changes in the law or in our services. The version in force is always the one published on this page.

Last updated: 30 September 2026.