Privacy policy
Last updated: 19 October 2026
This policy explains how we process personal data when you browse SC-Analytics, submit an enquiry, request a meeting or voluntarily subscribe to content.
1. Data controller
Arnau Sastre Conde, an independent professional trading as SC-Analytics (not incorporated as a company). Privacy contact and rights requests: arnau.sastre@sc-analytics.io.
2. Personal data processed
Name, email address, company, message and information voluntarily provided via forms; meeting and correspondence details; subscription information where applicable; technical records necessary for website security. When analytics cookies are accepted, Google Analytics may collect online identifiers, visited pages, session sources and site interactions. Please do not submit sensitive or confidential information in our forms.
3. Purposes and lawful bases
Enquiries and service or partnership requests: handling your request and pre-contractual steps taken at your request (GDPR Art. 6(1)(b)). Client administration and legal, accounting or tax duties: contractual necessity and legal obligation (Arts. 6(1)(b) and (c)). Site security, abuse prevention and continuity: proportionate legitimate interests (Art. 6(1)(f)). Optional newsletter and Google Analytics: separate, withdrawable consent (Art. 6(1)(a)). You need not accept analytics or marketing to contact us.
4. Recipients and processors
Service providers may include Vercel (website infrastructure), Supabase (storage and CRM), email and SMTP services, Calendly (meeting bookings) and Google Analytics (only with consent). Each acts under its relevant contractual terms and processing arrangements. We do not sell visitor personal data. Information may be disclosed to public authorities when legally required.
5. International transfers
These technology providers may process some information outside the European Economic Area. Where applicable, transfers rely on adequacy decisions, standard contractual clauses or other valid safeguards. Google Analytics is activated only after analytics consent. Consult each provider’s policy for details.
6. Data retention
Enquiries are retained as long as needed to respond and manage the business relationship and subsequently for applicable limitation or legal retention periods. Contractual and accounting records follow statutory retention rules. Subscriptions last until cancellation, while minimal evidence of consent or cancellation may be retained as needed. Google Analytics identifier lifetimes are discussed in our cookie policy and depend on configuration. We periodically review whether data is still needed.
7. Your rights
You may request access, correction, erasure, objection, restriction or portability where applicable by writing to arnau.sastre@sc-analytics.io. You may withdraw consent at any time, without affecting prior lawful processing. You may also complain to the Spanish Data Protection Authority (www.aepd.es).
8. Required fields and automated decisions
Fields marked as required are needed to handle your enquiry. We do not make solely automated decisions with legal or similarly significant effects on website visitors.
9. External links and changes
LinkedIn and Calendly are separate services with their own privacy policies. This document will be updated as purposes, providers or legal requirements change.