Privacy policy

Last updated: 2 September 2026

1. Data controller

Company PRODIGIA CONSULTORES, S.L. Tax ID (CIF) B-14621908 Registered office Avda. Pedro Iglesias, Urb. El Moredal, Bloque 1-B Bajos, 14940 Cabra (Córdoba), Spain Commercial Registry Commercial Registry of Córdoba Email legal@prodigia.com Telephone +34 669 75 93 08 Website www.prodigia.com

PRODIGIA CONSULTORES, S.L. ("Prodigia", "we", "us") processes personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation ("GDPR"), Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights ("LOPDGDD"), and Spanish Law 34/2002 on Information Society Services and Electronic Commerce ("LSSI-CE").

2. What data we process, why, and on what legal basis

We only process data that you provide to us or that is generated by your use of the website. We do not knowingly process special categories of data (health, political opinions, religious beliefs, etc.) or children's data.

2.1. Contact form and information requests

  • Data: name and surname, email address, telephone number, company, message content.
  • Purpose: to respond to your enquiry, prepare quotations, and maintain contact arising from your request.
  • Legal basis: your consent (Art. 6(1)(a) GDPR) and/or our legitimate interest in responding to a request you initiated (Art. 6(1)(f) GDPR).
  • Retention: for the duration of the enquiry and, thereafter, 1 year, unless a commercial relationship begins.

2.2. Client management and service delivery

  • Data: identification and contact details, billing data, and technical data necessary to deliver the service.
  • Purpose: performance of the contract, support, invoicing, and compliance with accounting and tax obligations.
  • Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR).
  • Retention: for the duration of the contractual relationship and, after it ends, for the applicable statutory limitation periods (6 years under Art. 30 of the Spanish Commercial Code; 4 years for tax matters under Art. 66 of the General Tax Act).

2.3. User registration on the Website

  • Data: username, email address, and password, which is stored in encrypted form and is not accessible to Prodigia.
  • Purpose: to create and manage your account and give you access to services reserved for registered users.
  • Legal basis: performance of the contract or service relationship (Art. 6(1)(b) GDPR).
  • Retention: for as long as the account remains active. After closure, data is blocked for the applicable statutory limitation periods.

2.4. Marketing communications

  • Data: name and email address.
  • Purpose: to send you information about our products, services, and news.
  • Legal basis: your express consent, given via an unticked checkbox (Art. 6(1)(a) GDPR and Art. 21 LSSI). If you are already a client, we may send you information about services similar to those you have purchased, under Art. 21(2) LSSI; you may object at any time.
  • Retention: until you withdraw your consent or unsubscribe. We keep a record of unsubscriptions so as not to contact you again.
  • Unsubscribing: via the link included in every communication, or by writing to legal@prodigia.com.

2.5. Cookies

  • Data: session identifier and browsing preferences stored on your device.
  • Purpose: to enable the technical operation of the website and to remember your preferences.
  • Legal basis: the website uses only technical cookies that are strictly necessary to provide the service, which are exempt from the consent requirement under Art. 22(2) LSSI. We do not use analytics, advertising, or third-party tracking cookies.
  • Full details: see our Cookie Policy.

3. Recipients of your data

We do not disclose your data to third parties except where legally required. We do use suppliers who access data as data processors, with whom we have signed the agreement required by Art. 28 GDPR:

Category of recipient Purpose of access Web and email hosting providers Hosting of the website and email accounts IT service and maintenance providers Development, technical support, and systems administration Electronic communications platforms Delivery of communications and notifications Tax, accounting, and payroll advisers Compliance with legal obligations Financial institutions and payment service providers Processing of payments and collections Public authorities and courts Where there is a legal obligation to disclose

You may request information about the specific recipients involved in each processing activity by writing to legal@prodigia.com.

4. International transfers

We do not transfer personal data outside the European Economic Area.

5. Your rights

You may exercise the following rights at any time:

  • Access: to know what data of yours we process.
  • Rectification: to correct inaccurate or incomplete data.
  • Erasure: to have your data deleted when it is no longer necessary.
  • Objection: to object to processing based on our legitimate interest and, in all cases, to receiving marketing communications.
  • Restriction of processing: to have processing suspended in the cases provided for by law.
  • Data portability: to receive your data in a structured, commonly used format, or to have it transmitted to another controller.
  • Not to be subject to automated individual decision-making with legal effects, including profiling. (We do not currently make decisions of this kind.)
  • Withdrawal of consent at any time, without affecting the lawfulness of processing carried out beforehand.

How to exercise them: write to legal@prodigia.com or to our registered office, stating which right you are exercising and enclosing a copy of a document proving your identity. We will respond within one month, extendable by a further two months in complex cases. Exercising these rights is free of charge.

Complaints: if you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001 Madrid, Spain — www.aepd.es), which is the competent supervisory authority.

6. Accuracy of data

The data you provide must be truthful and kept up to date. You are responsible for the accuracy of the information you give us and for notifying us of any changes. Prodigia is not liable for the consequences of false or inaccurate data supplied by users.

7. Children

The services offered on this website are not directed at children under 14. Under Art. 7 LOPDGDD, processing the data of children under 14 requires the consent of a parent or legal guardian. If we become aware that we have collected a child's data without such authorisation, we will delete it. If you are a parent or guardian and believe your child has provided us with personal data, please contact legal@prodigia.com.

8. Security measures

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk (Art. 32 GDPR), including TLS encryption of communications, access controls, backups, and activity logging. In the event of a personal data breach posing a high risk to your rights, you will be notified in accordance with Art. 34 GDPR.

9. Changes to this policy

We may update this Privacy Policy to reflect changes in legislation or in our processing activities. The version in force is always the one published on this page, showing its last-updated date. Where changes are substantial, we will notify you by appropriate means.

This is an English translation provided for convenience. In the event of any discrepancy, the Spanish version prevails.