Important notice: This document is an English translation provided for informational purposes only. In case of discrepancy between this version and the Spanish version, the Spanish version shall prevail.
1. Data controller
In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR), and with Spanish Organic Law 3/2018 of December 5 on Personal Data Protection and guarantee of digital rights (LOPDGDD), users are informed that the controller of personal data collected through the seocom.agency website is:
- Controller: Agencia Interactiva EA Barcelona S.L.
- Tax ID (CIF): B64890510
- Address: Carrer de Cristóbal de Moura, 49, Planta 2 Oficina 2.5, Sant Martí, 08019 Barcelona
- Contact email: [email protected]
- Phone: +34 933 686 411
2. Data we collect
SEOCOM collects personal data in the following cases:
Contact form: name, email, company, website, phone, sector, approximate annual revenue and message. Only name and email are required; every other field is optional. Data is collected when the user voluntarily fills in the form, available on the contact page and on the Kit Consulting programme page.
GEO and SEO diagnosis landing page: name, email, role, website and the answers to the diagnosis questionnaire, which travel with the request.
Resource downloads: email and company, when the user requests a guide or other downloadable material.
Newsletter subscription: email, when the user subscribes to SEO Sin Filtros.
Every form also automatically records the page it was sent from, the referring page and campaign parameters (UTM) where present. They tell us which content generates each request.
Audit booking via Google Calendar: name, email and selected time slot, plus whatever the user writes when booking. The booking does not happen on this site: the link opens a Google Calendar appointment page in a new tab, and the data is collected there.
Site navigation: technical navigation data (IP address, browser type, operating system, pages visited, time on site) collected through cookies and similar technologies. Details are regulated in the .
Blog comments (if enabled): name, email, IP address, user agent. Applicable if comments are enabled in the future.
3. Purposes of processing
The data collected is processed for the following purposes:
- Respond to inquiries: manage inquiries, quote requests and information requests that the user submits through the contact form.
- Booking management: organize free audit sessions booked through the booking system.
- Commercial communications: sending commercial information about SEOCOM services, provided that the user has given express consent.
- Statistical analysis: aggregated and anonymous analysis of navigation behavior to improve the website.
- Compliance with legal obligations: attention to requirements from administrative or judicial authorities.
4. Legal basis for processing
The legal basis for each purpose is:
- Contact form and bookings: pre-contractual measures at the request of the data subject (GDPR article 6.1.b) and consent of the data subject (GDPR article 6.1.a).
- Commercial communications: express consent of the data subject (GDPR article 6.1.a), revocable at any time.
- Statistical analysis: legitimate interest of SEOCOM in improving its services (GDPR article 6.1.f), always with anonymized or pseudonymized data.
- Legal obligations: compliance with applicable legal obligations (GDPR article 6.1.c).
5. Retention period
Data is retained for the following periods:
- Unconverted commercial inquiries: 12 months from last contact.
- Client data: during the term of the contractual relationship and, after termination, during the applicable legal periods (6 years for tax and commercial obligations).
- Navigation data: according to the specific periods of each cookie (see Cookies Policy).
- Data for commercial communications: until the data subject withdraws consent.
6. Data recipients
SEOCOM does not share personal data with third parties except for legal obligation. However, for technical and operational reasons, data may be processed by the following service providers acting as data processors:
- Cloudflare, Inc. (CDN, site hosting and anti-spam protection of the forms through Turnstile). With a signed Data Processing Agreement.
- Render Services, Inc. (hosting of the internal management system where requests are recorded, on servers located in the European Union).
- Supabase, Inc. (database where the requests received are stored, on servers located in the European Union).
- Resend (Plus Five Five, Inc.) (delivery of the automated emails: the internal notice to the team and the confirmation to the user).
- Google LLC (Google Analytics 4 for statistical analysis, Google Calendar for appointment booking, and Gmail for commercial communications).
The systems where requests are recorded and stored (Render and Supabase) are located in the European Union. Even so, some of these providers are US companies and may perform international data transfers outside the European Economic Area. These transfers are covered by European Commission adequacy decisions, Standard Contractual Clauses approved by the European Commission, or privacy frameworks such as the EU-US Data Privacy Framework, as applicable.
7. User rights
The user has the right to:
- Access their personal data.
- Rectify inaccurate or incomplete data.
- Erase data when no longer necessary.
- Object to the processing of their data.
- Request restriction of processing.
- Data portability to another controller.
- Withdraw consent at any time, without affecting the lawfulness of previous processing.
- File a complaint with the Spanish Data Protection Agency (www.aepd.es).
To exercise these rights, the user can send a communication to [email protected], indicating in the subject "GDPR rights exercise" and attaching an identifying document.
8. Security measures
SEOCOM applies appropriate technical and organizational measures to guarantee the security of personal data and prevent its alteration, loss, unauthorized processing or access.
Communications of personal data through the Site are made using encrypted connections (HTTPS/TLS).
Access to personal data within the organization is restricted to authorized personnel who need to know it to perform their duties.
9. Minors
The Site is not directed at minors under 14 years of age. SEOCOM does not knowingly collect or process personal data of minors under this age. If the registration of data of a minor of this age is detected, it will be deleted immediately.
10. Modifications to the policy
SEOCOM reserves the right to modify this Privacy Policy to adapt it to legislative changes or the evolution of its activities. Modifications will be published on the Site indicating the date of the last update.
Last updated: April 20, 2026.