# Privacy Policy | Alher Tech > Alher Tech privacy policy: how we collect, use, and protect your personal data under GDPR. Complete transparency in data handling. - Canonical page: https://alhertech.com/en/privacy-policy/ - Site: Alher Tech (custom software, AI agents and SEO engineering, https://alhertech.com/) - Contact: https://alhertech.com/en/contact/ --- At Alher Tech, we respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you. ## Who is responsible for processing your data? The processing of personal data collected through this website is carried out under joint controllership (article 26 GDPR) by Francisco Herran Cerezo (NIF 05964146Q, Calle Vicente Blasco Ibáñez 6E, Bajo, 28050 Madrid, Spain; tel. +34 637 349 347) and Alejandro Alonso García (NIF 06004334T, Calle Ayerbe 10, 28042 Madrid, Spain; tel. +34 679 837 431), who operate under the commercial brand «Alher Tech» (formerly «Grupo MVPBuilt»). You can contact either joint controller by writing to francisco.herran@alhertech.com. The essential elements of the joint controllership agreement are available to interested parties upon request at the same email address. ## Information We Collect We may collect, use, store and transfer different kinds of personal data about you, including your name, email address, phone number, the services you are interested in (custom web development, mobile development, custom software, AI agents and automations, SEO optimization, digital marketing, blockchain development or software maintenance) and information about your preferences and the message you choose to send us through our forms. ## Legal basis and purpose We process your data on the following legal bases: (a) your consent, when you submit a contact form or subscribe to our newsletter; (b) the performance of a contract, when you become a customer; (c) our legitimate interest, to operate the website, prevent fraud and improve our services. Data is used only for the purpose for which it was collected. Respond to your enquiries and quote requests for our software development services (custom web, mobile, custom software, AI agents, SEO, digital marketing, blockchain and maintenance), provide the contracted services, send you the newsletter you subscribed to and comply with our legal obligations. ## Data retention We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting or reporting requirements. Contact requests are kept for one year; newsletter subscriptions until you unsubscribe; customer data for the legally required period (typically 6 years for tax obligations). ## Cookies We use our own and third-party cookies to make the site work, analyze traffic and personalize advertising. We will only install non-essential cookies if you accept them through the consent banner. For a complete description of every cookie we use, the third-party providers involved and how to configure or revoke your consent at any time, please consult our Cookie Policy. ## Session recording If you accept analytics cookies, we record how our own website behaves during your visit — the pages you open, where you click and scroll, how the page itself changes and any errors it produces — so that we can replay the visit afterwards and find what does not work. The recording is made with our own technology, stored on our self-hosted infrastructure in Spain and never shared with third parties. What you type is masked before it leaves your browser: we do not record passwords or the contents of any field, only that a field was filled in. Recordings are kept for a maximum of 14 days and are then deleted automatically. You can prevent them by rejecting analytics cookies in the consent banner, or by withdrawing your consent at any time. ## Our own analytics and approximate location Alongside the third-party tools below, we run our own analytics on our own infrastructure. With analytics consent, we record the pages you visit, how long you stay, the site that referred you, your browser and device, and your IP address. The IP address is used for two things: telling one visit apart from another, and working out an approximate location — country and city, never a street or an exact position. That lookup is made by sending the address over an encrypted connection to ipwho.is, which answers with the place and which processes your data for nothing else; if the lookup fails, the visit is simply recorded without a place. All of it stops if you decline analytics cookies. ## Third-Party Analytics and Advertising Tools When you consent to marketing cookies, we use the following third-party tools: ## Meta Pixel (Facebook Pixel) We use Meta Pixel, provided by Meta Platforms, Inc., to measure the effectiveness of our advertising campaigns on Facebook and Instagram, understand how visitors interact with our website, and build audiences for ad targeting. Meta Pixel may collect information such as your IP address, browser type, pages visited, and actions taken on our website (e.g., contact form submissions, newsletter subscriptions). This data is sent to Meta and may be used to show you targeted ads on Meta platforms. Meta Pixel is only activated after you explicitly grant cookie consent. For more information, visit Meta's Data Policy at https://www.facebook.com/privacy/policy/. When you submit a contact form or subscribe to our newsletter, we may share hashed versions of your email address, name, or phone number with Meta through Advanced Matching to improve ad attribution accuracy. ## Google Analytics 4 We use Google Analytics 4 (GA4), provided by Google LLC, to analyze website traffic and user behavior. GA4 collects information such as pages visited, session duration, traffic sources, device type, and approximate geographic location (based on IP address). Google may use this data to contextualize and personalize ads in its own advertising network. GA4 is only activated after you explicitly grant cookie consent. For more information, visit Google's Privacy Policy at https://policies.google.com/privacy. ## Data processors and international transfers The personal data that you submit through our website forms (contact form, newsletter subscription) is stored on our own self-hosted infrastructure, physically located in Spain (European Union), and operated directly by the joint controllers. No backend-as-a-service provider is involved and no international transfer of that stored data takes place. To deliver the service we do rely on the following data processors, some of them incorporated outside the European Economic Area: All these processors have signed a data processing agreement with Alher Tech under article 28 of the GDPR. Where transfers to processors incorporated outside the EEA cannot be avoided, they rely on an adequacy decision (EU-US Data Privacy Framework) or on Standard Contractual Clauses approved by the European Commission, together with supplementary technical measures (HTTPS, at-rest encryption, role-based access control). - Plus Five Five, Inc. (United States), resend, the transactional email service that delivers the notification of your form submission to us and the acknowledgement of receipt to you. It therefore processes the name, email address and message content that you type into the form. Adequacy mechanism, eU-US Data Privacy Framework, and a data processing agreement under article 28 GDPR. - Cloudflare Inc. (United States). Content delivery network and edge hosting of the static site. Adequacy mechanism, eU-US Data Privacy Framework. - Google LLC (United States), google Analytics 4. Adequacy mechanism, eU-US Data Privacy Framework. Only loaded with analytics consent. - Meta Platforms Inc. (United States), meta Pixel for advertising measurement. Adequacy mechanism, eU-US Data Privacy Framework. Only loaded with marketing consent. - ipwho.is, turning a visitor's IP address into an approximate country and city for our own analytics. The address travels over an encrypted connection. Only queried with analytics consent. - Anthropic PBC (United States), claude AI models for our internal software development tooling, no personal data of website visitors is processed. ## How We Use Your Information We use the information we collect in various ways, including to provide, operate, and maintain our website, improve, personalize, and expand our website, understand and analyze how you use our website, develop new products, services, features, and functionality, measure the effectiveness of our marketing campaigns, and build audiences for advertising purposes. ## How We Share Your Information We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information. We share data only with the data processors listed above, strictly to deliver the services you requested. ## Data Security We have implemented appropriate technical and organizational measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered or disclosed, encrypted connections (HTTPS), full-disk encryption at rest on the server that stores the data, automatic daily, weekly and monthly backups of the database, access control with strong passwords and multi-factor authentication, and signed processor agreements. ## Your Rights Under the GDPR you have the right to access, rectify, erase, restrict or oppose the processing of your personal data, the right to data portability and the right to withdraw your consent at any time without affecting the lawfulness of processing carried out before its withdrawal. To exercise any of these rights write to francisco.herran@alhertech.com attaching a copy of your ID or equivalent identification document. You also have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es), especially when you have not obtained satisfaction in the exercise of your rights. In accordance with Spanish Law 34/2002 (LSSICE), we will not send commercial communications if you so inform us at the email address indicated above. ## Contact Us If you have any questions about this privacy policy or our privacy practices, please contact us at: francisco.herran@alhertech.com