Legal

Privacy Policy

Last updated: August 2026

IT Integrated Business Solutions and Services, S.L. (hereinafter, “the Company”) guarantees the confidentiality and protection of personal data belonging to users of this website, in strict compliance with the General Data Protection Regulation (GDPR – EU 2016/679) and Spanish Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

1. Data Controller

  • Company Name: IT Integrated Business Solutions and Services, S.L.
  • Tax ID (CIF): B20923645
  • Registered Address: Kaxtola 25, 20009 San Sebastián (Guipúzcoa), Spain
  • Contact Email: info@it-iss.com

2. Processing of Data Collected via the Website

A. Contact Form and Direct Inquiries

  • Purpose: To attend to, process, and respond to your requests for information, quotes, or inquiries regarding our IT services, database management, cloud infrastructure, and artificial intelligence solutions.
  • Legal Basis: The data subject’s explicit consent granted when submitting the contact form or sending an email.
  • Retention: Data will be stored for the time strictly necessary to resolve the inquiry. If the inquiry leads to a business relationship, the data will be retained for the duration of that relationship and any applicable statutory periods.

B. Browsing Data and Web Analytics (Google Analytics)

  • Purpose: To measure and analyze website traffic in order to improve user experience and optimize our content delivery.
  • Legal Basis: User consent provided via explicit acceptance on the cookie banner or preference panel.
  • Retention: Data will be retained for the period set by the analytics provider or until the user revokes their consent.

3. Data Recipients and Processors (Sub-processors)

Your personal data will not be transferred to third parties, except under legal obligation. However, to operate this website, the Company uses trusted technology providers acting as Data Processors:

  • Web Infrastructure and Hosting: Amazon Web Services (AWS), with servers and storage located in the data center region eu-west-1 (Ireland, European Union).
  • Email Management: Google Ireland Limited (Google Workspace), for managing and receiving email communications.
  • Web Analytics: Google Ireland Limited (Google Analytics), subject to prior acceptance via the cookie banner.

All our providers comply with the legal safeguards required by European regulations and ensure adequate levels of data protection within the European Economic Area (EEA).

4. Artificial Intelligence and Data Protection

We explicitly inform users that:

  • This website does not use inputs or data submitted through the contact form to train public or third-party artificial intelligence models.
  • Submitted data is processed exclusively for direct human communication and commercial management.

5. Separation of Roles: IT Services and Database Management (Controller vs. Processor)

This Privacy Policy applies strictly to the processing of data collected through this website, where the Company acts as the Data Controller. When the Company provides professional services involving database administration, Cloud infrastructure management, or AI deployments within a client’s own environments, the Company acts as a Data Processor. Such business data processing is strictly governed by the corresponding Data Processing Agreements (DPA) signed individually between the parties.

6. User Rights

Any user may exercise their data protection rights at any time:

  • Access: Consult what personal data we hold about you.
  • Rectification: Request the modification of inaccurate or incomplete data.
  • Erasure (“Right to be Forgotten”): Request the deletion of your data when it is no longer necessary for the purposes for which it was collected.
  • Objection: Object to the processing of your personal data.
  • Limitation of Processing: Request that we temporarily suspend the processing of your data under certain circumstances.
  • Portability: Receive your data in a structured, commonly used format.

How to exercise your rights? You may submit a written request stating “Data Protection” as the subject to:

  • Email: info@it-iss.com
  • Postal Address: Kaxtola 25, 20009 San Sebastián (Guipúzcoa), Spain

If you feel that your rights have not been properly addressed, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) via their official website: www.aepd.es.

7. Data Security

The Company adopts the necessary technical, organizational, and security measures to prevent the alteration, loss, unauthorized processing of, or access to personal data, taking into account the state of technology, the nature of the stored data, and the risks to which it is exposed.

8. Updates to the Privacy Policy

The Company reserves the right to modify this Privacy Policy to adapt it to legislative, judicial, or operational changes to the website. Users are advised to review this document periodically.