Privacy Policy
Last updated: July 2026
1. Data Controller
Name: Alex (trading as Kosta Digital)
NIF: 76881423J
Address: Málaga, Spain
Email: contacto@kostadigital.com
2. What Data We Collect
We collect the personal data you voluntarily provide when you fill in our free audit / contact form: name, email address, phone number and the content of your message. If you contact us via the WhatsApp button, we receive whatever data WhatsApp shares with a standard chat (typically your name and phone number).
If you accept our cookie banner, we also collect browsing data through Google Analytics (pages visited, time on site, approximate location, device type) and through the Meta Pixel (interactions with this site for ad measurement). No data is collected via analytics or advertising tools if you decline cookies.
3. Purpose and Legal Basis
Responding to your inquiry (contact form or WhatsApp): based on your consent, given by voluntarily submitting your details, and on our legitimate interest in answering commercial inquiries.
Site analytics and ad measurement (Google Analytics, Meta Pixel): based on your explicit consent given through the cookie banner. You can decline or withdraw this consent at any time.
We do not use your data for any purpose other than those described above, and we do not sell or rent your personal data to third parties.
4. Who We Share Data With
We use the following processors to operate this website and respond to inquiries:
- Web3Forms — processes and delivers contact form submissions.
- Vercel Inc. — hosts this website and processes standard server logs (IP address, browser type, access times).
- Google LLC (Google Analytics) — processes anonymized/pseudonymized browsing data, only after consent.
- Meta Platforms Ireland Ltd. (Meta Pixel) — processes interaction data for advertising measurement, only after consent.
These providers act as data processors under their own privacy policies and may transfer data outside the European Economic Area under adequate safeguards (such as Standard Contractual Clauses or an EU adequacy decision).
5. Data Retention
Contact form and WhatsApp inquiries are kept for as long as necessary to handle your request and, where a business relationship follows, for the duration of that relationship plus the periods required by Spanish tax and commercial law (generally up to 6 years). Analytics data is retained according to Google's and Meta's default retention settings unless configured otherwise.
6. Your Rights
Under the GDPR, you have the right to access, rectify and erase your data, as well as to request restriction of, or object to, its processing, and to data portability. To exercise any of these rights, contact us at contacto@kostadigital.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es) if you believe your rights have not been respected.
7. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page indicates when it was last revised.
