Privacy policy

1. Data controller

• HolaClics (trade name), Tax ID (NIF) Z0848512R
• Calle Zulaida 11, 03170 Rojales (Alicante), Spain
• Email: info@holaclics.com

2. Contact forms

Data: whatever you enter in the form. The short form in the footer asks for your name, an email address or a telephone number, and a message. The form on the contact pages asks for your name, telephone number, email address, your website (optional), the main challenge facing your business and a message. The date, the page of the website through which you arrived, the language and the city of the page are also stored with the request.

What we do with it: the request is saved in a file on our server and we are notified by email, so that we can reply to you. Your IP address is not stored with the request: it is only used in memory, for a few minutes, to limit the number of submissions and prevent abuse.

Purpose and legal basis: to reply to your enquiry and, if you ask for one, to prepare a quotation (pre-contractual measures, article 6(1)(b) GDPR).

Retention period: for as long as necessary to deal with your enquiry and any business relationship that may result from it. You may request its erasure at any time.

Free PDF guides: on the service pages you can ask for a guide by leaving your email address. We save your address, the guide requested, the language, the page and the date in the same file on our server, and we are notified by email. We use your address to deliver the guide you ask for (article 6(1)(b) GDPR). Below the field there is an optional box, never ticked in advance: if you tick it, you agree that we may write to you later about the topic of that guide (article 6(1)(a) GDPR and article 21 of the Spanish LSSI). In that case your address, the guide and the language are recorded in our internal sales follow-up tool, hosted on the same server; the message is prepared by our team and sent by a person, never automatically. You can withdraw that consent at any time by replying "no" or by writing to info@holaclics.com. If you do not tick the box, we do not write to you again.

3. Telephone, WhatsApp and email

If you call us, or write to us by WhatsApp or by email, we process the data you give us in order to reply to you (article 6(1)(b) GDPR). WhatsApp is a Meta service with its own terms and its own privacy policy. When you open WhatsApp from the website, the suggested message may include a short reference to the page through which you arrived, which you can delete before sending it.

4. Appointments via Calendly

15-minute appointments are booked through Calendly (Calendly LLC, United States). Calendly collects the name, email address and answers you enter in its form, and passes them to us so that we can prepare the call (article 6(1)(b) GDPR). On the contact pages the Calendly calendar is embedded and is loaded from Calendly's servers when the page is opened. Calendly participates in the EU-U.S. Data Privacy Framework.

5. Client area

• Account: name, company, telephone number, city, website (optional), email address, language and password. The password is stored encrypted (scrypt); nobody can read it.
• Session: when you log in, a 30-day session is created which stores the IP address and browser from which it was opened. It is deleted when you log out or when it expires.
• Security: when the account is created, the date and IP address are recorded in the account history. Failed login attempts are recorded with the email address used and are deleted after 24 hours.
• Service: services ordered, payments and invoices, the technical audits we carry out on your website, the search metrics of your business (Google Search Console, if you give us access), reports and the messages we exchange.

Purpose and legal basis: to provide the contracted service and manage the account (article 6(1)(b) GDPR), to comply with accounting and tax obligations (article 6(1)(c)) and to protect the account against unauthorised access (article 6(1)(f), legitimate interest).

Retention period: for as long as the account remains open. You may request its closure by writing to info@holaclics.com; when it is closed we erase its data, except billing data, which the law requires us to keep for six years (article 30 of the Spanish Commercial Code (Código de Comercio)), and data needed for tax obligations during the limitation period. Backups of the client area are made daily and kept for 30 days.

6. Payments

Online payments are made on the Stripe payment page (Stripe Payments Europe Ltd., Ireland). Card details are processed directly by Stripe: HolaClics neither sees nor stores them. We store the Stripe customer identifier, the status of subscriptions and the invoices (article 6(1)(b) and 6(1)(c) GDPR).

7. Visitor statistics (Google Analytics)

The website uses Google Analytics 4 (Google Ireland Ltd.) to find out which pages are visited and how many people click the contact buttons (WhatsApp, telephone, email and form submission). For this purpose Google processes cookie identifiers, browser and device data and an approximate location, and may transfer them to Google LLC (United States), which participates in the EU-U.S. Data Privacy Framework.

Legal basis: consent (article 6(1)(a) GDPR and article 22.2 of the LSSI-CE). You may refuse or withdraw it at any time by blocking or deleting these cookies, as explained in the cookie policy.

8. Google Fonts typefaces

The website's typefaces are downloaded from Google Fonts (Google Ireland Ltd.). To serve them, Google receives the visitor's IP address. Google Fonts does not set cookies.

9. Server logs

Like any web server, ours records each request: IP address, date and time, page requested, browser and referring page. These logs are used for security and to resolve faults (article 6(1)(f) GDPR, legitimate interest). They are rotated every week and deleted after about five weeks.

10. Recipients and data processors

• LWS (Ligne Web Services SAS, 4 rue Galvani, 75017 Paris, France): hosting of the website, of the server that receives the forms and of email.
• Brevo (Sendinblue SAS, France): sending of emails from holaclics.com addresses.
• Stripe (Stripe Payments Europe Ltd., Ireland): payments and invoices.
• Calendly (Calendly LLC, United States): appointment booking.
• Google (Google Ireland Ltd.): visitor statistics and typefaces.
• Meta (WhatsApp Ireland Ltd.): only if you write to us by WhatsApp.
• Public authorities, where required by law.

We do not sell or disclose personal data for commercial purposes. The only transfers outside the European Economic Area are those made by the providers listed above, with the safeguards they offer (EU-U.S. Data Privacy Framework or standard contractual clauses of the European Commission).

11. Your rights

You may request access to, rectification or erasure of your data, object to or request restriction of its processing, and request its portability, and you may withdraw any consent given at any time, by writing to info@holaclics.com. If you consider that we have not dealt with your request properly, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD, www.aepd.es).

12. Other information

• We do not take automated decisions about individuals or carry out profiling.
• Our services are intended for businesses and professionals. Children under 14 must not send us any data.
• Security: the website always runs over HTTPS, access to the server is restricted and client area passwords are stored encrypted.