This Policy explains how Saskia ("we") processes personal data collected through https://www.saskiahq.com (the "Website"), in compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Controller
- Fast Ventures, S.L. (CIF B-65179764), trading as Saskia.
- Contact:[email protected]
- Full registered details are set out in our Legal Notice.
We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 GDPR.
2. Data we collect
- Inquiry data (submitted via the contact form): name, work email, company name, company website, optional details you choose to provide.
- Technical data (collected automatically): IP address, browser type, device, pages visited, timestamps, referrer.
- Cookie data: as described in our Cookie Policy.
- Email correspondence: content of messages you exchange with us.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Respond to your inquiry and evaluate a potential engagement | Pre-contractual measures at your request (Art. 6.1.b) |
| Send service-related communications | Legitimate interest in following up on your request (Art. 6.1.f) |
| Website security, fraud prevention, and analytics | Legitimate interest (Art. 6.1.f) |
| Comply with legal obligations (tax, accounting, requests from authorities) | Legal obligation (Art. 6.1.c) |
| Non-essential cookies and marketing | Your consent (Art. 6.1.a) |
You may withdraw consent at any time without affecting prior lawful processing.
4. Retention
- Inquiry data: up to 24 months from last contact, unless we enter into a commercial relationship (in which case it is retained for the duration of that relationship plus applicable legal limitation periods).
- Technical and cookie data: as set out in the Cookie Policy.
- Records required by law (e.g., accounting): for the periods established by Spanish law (generally up to 6 years).
5. Recipients
We share data only with service providers acting as processors under written agreements, including: cloud hosting, database, email, and analytics providers. We do not sell personal data and do not share it with third parties for their own marketing.
6. International transfers
Where providers process data outside the European Economic Area, we rely on the European Commission's adequacy decisions or on Standard Contractual Clauses (SCCs) with supplementary measures where required. A list of current providers and safeguards is available on request.
7. Your rights
You have the right to: access your data; rectify inaccurate data; erase data; restrict or object to processing; portability; and withdraw consent. You may exercise these rights by writing to [email protected], identifying yourself and the right you wish to exercise.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) — www.aepd.es.
8. Providing data
Providing data marked as required in the contact form is necessary to process your inquiry; without it, we cannot respond. All other data is optional.
9. Automated decisions
We do not carry out automated decision-making, including profiling, that produces legal or similarly significant effects on you.
10. Changes
We may update this Policy. Material changes will be signalled on the Website. The current version applies from the date shown above.