PRIVACY POLICY

Last updated: January 2026

Daniel Villalba Durán, trading under the name BRAIN IT (hereinafter, "BRAIN IT", "we" or "the Controller"), makes this Privacy Policy available to users, in compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).

1. DATA CONTROLLER

Identity: Daniel Villalba Durán
Trade name: BRAIN IT
Address: Calle Pablo Iglesias 4, 28330 San Martín de la Vega, Madrid
Email: brainit@brainit.es
Website: www.brainit.es

2. APPLICABLE PROCESSING PRINCIPLES

In processing your personal data, BRAIN IT will apply the following principles in accordance with the GDPR:

  • Lawfulness, fairness and transparency: We will request your consent for processing your data for one or more specific purposes, informing you beforehand with absolute transparency.
  • Data minimization: We will only request data strictly necessary for the required purposes.
  • Storage limitation: Data will be kept for the time necessary for the purposes of the processing.
  • Integrity and confidentiality: Your data will be treated in a way that guarantees adequate security and confidentiality.

3. DATA WE COLLECT

3.1. Website browsing

BRAIN IT DOES NOT use cookies, web analysis tools (such as Google Analytics), or tracking systems of any kind. We also do not store information about user preferences, such as the selected language.

Therefore, we DO NOT collect or store personal data or browsing information, except for the strictly necessary technical logs automatically generated by our server for basic site operation (such as the IP address, kept temporarily for security reasons).

3.2. Contact via email or WhatsApp

When a user contacts us, we collect:

  • Email: Email address, name (if provided), and message content.
  • WhatsApp: Phone number, associated name (if provided), and conversation content.

Purpose: To attend, manage, and respond to your inquiry.
Legal basis: Consent of the data subject by sending us the communication.
Storage: For the time necessary to resolve your inquiry and subsequent legal periods (between 3 and 6 years).

3.3. Contact via social networks

Processing will be subject to the privacy policies of each platform (LinkedIn, Facebook, etc.). BRAIN IT will only process data provided directly through private messages or comments to address your request.

4. PURPOSE OF DATA PROCESSING

  • Inquiry and communication management: Address requests sent via email, WhatsApp, or social networks.
  • Compliance with legal obligations: Comply with applicable regulations.
  • Computer security: Temporary technical logs to prevent attacks.

BRAIN IT DOES NOT perform profiling or make automated decisions.

5. LAWFULNESS OF PROCESSING

The legal basis is the consent of the data subject when contacting us, legitimate interest for site security, and compliance with legal obligations.

6. DATA RECIPIENTS

We will not share your data with third parties, except for legal obligations or with strictly necessary service providers (hosting, email) acting as data processors. We do not sell or transfer your data for commercial purposes.

7. INTERNATIONAL TRANSFERS

BRAIN IT does not perform international data transfers outside the European Economic Area (EEA).

8. STORAGE PERIOD

  • Inquiries: Time necessary for resolution and legal prescription periods (3-6 years).
  • Technical logs: Maximum 3 months.

9. USER RIGHTS

You have the right to: Access, Rectification, Erasure ("right to be forgotten"), Objection, Limitation of processing, Portability, and Withdrawal of consent.

To exercise them, write to brainit@brainit.es with the subject "Privacy Rights", proving your identity and specifying the requested right.

You can also file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

10. SECURITY MEASURES

We implement HTTPS encryption, access control, backups, and regular updates to protect your data.

For more information, contact us at brainit@brainit.es.