Privacy Policy

At OUSGUR, S.L. we take your privacy seriously. This policy clearly explains what personal data we process, why we use it, and what your rights are. It is drafted in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights (LOPDGDD).

1. Data controller

If you have any questions about how your personal data is processed or you wish to exercise your rights, please write to us at privacidad@ousgur.com.

2. What data we process and for what purpose

We collect the minimum data necessary for the following purposes:

2.1. When you contact us by email

When you send an email to hola@ousgur.com (or any other Ousgur mailbox), we process:

• Identifying data: name, surname, email address.
• Professional data: company, role (if you provide them).
• Message data: the content of the email and any information you choose to share.

Purpose: to respond to your enquiry, assess whether we are a good fit as a provider, and maintain business communication regarding the enquiry you initiated.

2.2. When you contact us via WhatsApp

When you start a conversation via the WhatsApp button on the website, we process:

• Your phone number.
• Your WhatsApp profile name and, where applicable, photo.
• The content of the messages you send us.

Purpose: identical to the previous section. WhatsApp is the platform through which communication takes place, and is subject to its own privacy policy.

2.3. Technical data when visiting the site

When you visit ousgur.com, our hosting provider logs certain technical data for security and performance reasons:

• IP address.
• Browser type and version.
• Operating system.
• Pages visited and date/time of access.

Purpose: to ensure server security, detect technical incidents and prevent abuse. These logs are managed by the hosting provider and are never used to create profiles of visitors.

3. Legal basis for processing

The legal bases that allow us to process your data are:

• Your consent (art. 6.1.a GDPR): when you voluntarily send us an email or a WhatsApp message with your enquiry.
• Legitimate interest (art. 6.1.f GDPR): for the technical data collected in server logs, necessary to maintain the security of the site.
• Compliance with legal obligations (art. 6.1.c GDPR): if within a contractual relationship we must comply with tax, commercial or accounting obligations.

4. Retention period

We retain your data for the following periods:

• Enquiries that do not result in a business relationship: 1 year from the last contact, unless you request earlier deletion.
• Data linked to a contractual relationship: for the duration of the relationship and, once finished, for the applicable legal periods (6 years for commercial obligations under the Spanish Commercial Code; up to 10 years for tax obligations).
• Server logs: according to Hostinger's retention policy, generally between 30 and 90 days.

5. Recipients and processors

We do not sell or transfer your data to third parties for commercial purposes. We only share data with the following service providers, who act as processors under contracts that guarantee GDPR compliance:

Additionally, we may share your data with public bodies when there is a legal obligation (for example, Spanish Tax Agency, Social Security, courts).

6. International transfers

All our main providers (Hostinger, Meta Ireland) are established in the European Union or the European Economic Area, so your data does not leave this enhanced protection scope.

In the particular case of WhatsApp, although Meta Ireland is the contractual controller in the EU, some technical processing may take place on Meta servers in the United States. Meta has adequate safeguards established by the European Commission (Data Privacy Framework) to legitimise these transfers.

7. Your rights

As a data subject, you have the following rights recognised by the GDPR:

• Right of access: to know what data of yours we process.
• Right of rectification: to correct inaccurate data.
• Right of erasure ("right to be forgotten"): to request the deletion of your data.
• Right to object: to object to processing on grounds relating to your particular situation.
• Right to restrict processing: to pause processing while an issue is verified.
• Right to data portability: to receive your data in a structured, machine-readable format.
• Right to withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, send an email to privacidad@ousgur.com clearly indicating which right you are exercising. We will respond within a maximum of one month.

Likewise, if you consider that the processing of your personal data infringes the regulations, you have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es) — although we encourage you to contact us first to resolve any doubts directly.

8. Security measures

We apply reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, loss or destruction. These measures include:

• Encrypted connection (HTTPS) throughout the website.
• Access to data restricted to authorised personnel only.
• Providers that comply with GDPR and recognised security certifications.

9. Changes to this policy

We may update this Privacy Policy when necessary due to regulatory changes or evolution of our services. The current version will always be the one published on this page, with the last update date clearly visible at the top.

If you need more information or have any questions, please contact us at privacidad@ousgur.com.