1. Privacy Policy (GDPR)
EU 2016/679HookUpApi ("we", "us"), located at Rúa do Bidueiro, 10, Oleiros, A Coruña, Spain, is the data controller for personal data collected through this website and our commercial communications. You may reach our data desk at [email protected].
1.1 What We Collect
When you submit an inquiry through our contact console or correspond with us by email or phone, we process: your name, work email, phone number, company name, budget band, project brief content, and any files you voluntarily provide. We also process strictly technical logs (IP address, user agent, timestamps) required to operate and secure the website.
1.2 Purpose & Legal Basis
Inquiry data is processed under Article 6(1)(b) GDPR (steps prior to a contract) and Article 6(1)(f) (our legitimate interest in responding to commercial inquiries and defending the security of our systems). Client project data is processed under Article 6(1)(b) to perform the engineering contract you engage us for. We do not engage in automated decision-making or profiling.
1.3 Retention & Hosting
Unconverted inquiries are retained for a maximum of 24 months from last contact. Client project records are retained for the duration of the engagement plus the statutory commercial and tax retention periods required under Spanish law (typically 6 years). All production data is hosted within the European Union on infrastructure protected by encryption in transit (TLS 1.3) and at rest (AES-256).
1.4 Your Rights
Under the GDPR you have the right to access, rectify, erase, restrict, and port your personal data, as well as to object to processing and lodge a complaint with a supervisory authority. To exercise any right, write to [email protected]. We respond within 30 days.
1.5 Sub-Processors
We engage a limited set of vetted sub-processors for email delivery, payment processing (Stripe), and cloud hosting. Each is bound by data-processing agreements compliant with Article 28 GDPR. A current sub-processor list is available on request via the email above.