Privacy policy.

1. Data controller

The controller of the personal data collected through https://margarit.co is:

• Entity: Margarit Ibiza, LLC
• Jurisdiction: State of Delaware, United States
• Address: c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, USA
• EIN: 30-1430776
• Contact email: rodrigo@margarit.co

Margarit Ibiza, LLC does business under the “margarit.co” brand and provides technology consulting, process automation and AI implementation services.

2. Data we collect

We collect the following personal data:

• Contact form: name, email, message and any other information you voluntarily include.
• Direct communication: information shared by email, WhatsApp or video call when you contact us.
• Browsing data: IP address, device type, browser, pages visited and time spent on the site, collected through Google Analytics.
• Cookies: see our Cookie Policy.

3. Purposes of processing

Your data is processed solely to:

• Answer your inquiries and manage the business relationship.
• Prepare and deliver the contracted services.
• Issue invoices and meet legal and tax obligations.
• Analyze use of the website in aggregate in order to improve it.

We do not use your data for automated marketing or commercial profiling, and we do not sell it to third parties.

4. Legal basis

The processing of your data is based on:

• Consent (Art. 6(1)(a) GDPR) when you submit the form or get in touch with us.
• Performance of a contract (Art. 6(1)(b) GDPR) when there is an active contractual relationship.
• Legal obligation (Art. 6(1)(c) GDPR) to comply with tax and accounting regulations.
• Legitimate interest (Art. 6(1)(f) GDPR) for aggregate analysis of the site and for security.

5. Retention

Data is kept for as long as necessary to fulfill the purpose for which it was collected and, after that, for the period required by law (tax and commercial regulations). Analytics data is kept for up to 26 months, in line with the Google Analytics 4 settings.

6. Recipients and data processors

We share data with the following providers, which act as data processors:

• Google LLC — domain hosting (Firebase Hosting) and analytics (Google Analytics 4).
• Meta Platforms, Inc. — communication via WhatsApp when you initiate contact through that channel.
• Google Workspace — email and calendar.

We do not disclose your data to third parties unless required by law.

7. International transfers

Margarit Ibiza, LLC is an entity incorporated in the United States. Data may be processed on servers located in the US and in other countries where the providers listed in section 6 operate. These transfers are covered by the standard contractual clauses approved by the European Commission and, where applicable, by the EU-US Data Privacy Framework.

8. Your rights

You can exercise the following rights at any time:

• Access to the data we hold about you.
• Rectification of inaccurate data.
• Erasure (the “right to be forgotten”).
• Objection to processing.
• Restriction of processing.
• Portability of your data.
• Withdrawal of consent previously given.

To exercise them, send an email to rodrigo@margarit.co with a copy of your identity document. We will respond within a maximum of 30 days.

If you reside in the EU, you can also file a complaint with the Spanish Data Protection Agency (AEPD) — aepd.es.

9. Security

We take reasonable technical and organizational measures to protect your data against unauthorized access, loss or alteration. The site runs over HTTPS, and the external services listed above meet international security standards.

10. Changes to this policy

We may update this policy to reflect regulatory changes or changes to our services. The “last updated” date shows the version currently in force. Significant changes will be announced through a prominent notice on the site.