Privacy policy
Last updated: 18 October 2026.
Data controller
- Controller: Bidatia Sistemas S.L.
- Tax ID (CIF): B19896935
- Address: Calle Juan de Mairena, 107, 28909 Getafe (Madrid), Spain
- Privacy contact: bidatia@bidatia.com
- Phone: +34 660 466 915
What data we process
Only the data you provide in the contact form: name, company, work email, phone (optional), type of organisation, area of interest and your message. For security reasons we also record a pseudonymised, irreversible version of your IP address (we never store the IP itself). We do not request special categories of data: please don't include them in your message.
Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Answering your enquiry and, if you request it, preparing a proposal | Your consent (art. 6.1.a GDPR) and steps taken at your request prior to entering into a contract (art. 6.1.b GDPR) |
| Commercial follow-up of the relationship you have started | Legitimate interest in handling the request and continuing the relationship (art. 6.1.f GDPR) |
| Protecting the site against abuse, spam and attacks | Legitimate interest in the security of the service (art. 6.1.f GDPR and recital 49) |
We do not send unsolicited marketing, make automated decisions or build profiles with legal effects on you.
How long we keep it
Contact form data is kept for as long as necessary to handle your request and for a maximum of 2 years from the last contact, unless a contractual relationship begins (in which case it is kept for the duration of the relationship and the statutory limitation periods). After that it is deleted automatically.
Recipients
We do not share your data with third parties unless legally required. To provide the service we use providers acting as processors under contracts compliant with art. 28 GDPR: web hosting and database, corporate email (Microsoft 365) and, if enabled, the Cloudflare Turnstile anti-bot verification service.
If you choose to contact us on WhatsApp, Meta Platforms processes your data as an independent controller under its own privacy policy.
International transfers
Some providers may process data outside the European Economic Area. In that case, transfers are based on European Commission adequacy decisions (such as the EU-US Data Privacy Framework for certified organisations) or on standard contractual clauses approved by the Commission.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time without affecting the lawfulness of prior processing, by writing to bidatia@bidatia.com or by post to Calle Juan de Mairena, 107, 28909 Getafe (Madrid), Spain, stating the right you wish to exercise. We may ask you to verify your identity.
If you believe we have not handled your rights correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Minors
This site is aimed at professionals and businesses. We do not knowingly collect data from children under 14.
Security
We apply technical and organisational measures appropriate to the risk: encryption in transit (HTTPS), access control with two-factor authentication, audit logging, IP pseudonymisation and automatic deletion when the retention period expires.