Privacy Policy

Who is responsible

Constat is a product currently being incorporated as a company. Until then, the data controller is the Constat team, reachable at [email protected] for any privacy matter. The full company details will be published here once incorporation is complete.

What we collect

If you use the contact form, we collect the name and email you enter, and optionally your company, a short description of your IBM i estate, and your message.

Our server keeps minimal technical logs (such as IP address and request time) for security and reliability. We do not create user accounts and we do not track you across the web.

Why, and the legal basis

We use your contact data only to respond to your enquiry and to follow up on the assessment you asked for. The legal basis is your consent when you submit the form, and our legitimate interest in answering a business enquiry (GDPR Art. 6(1)(a) and (f)).

The anti-abuse check on the form (Cloudflare Turnstile) is used on the basis of our legitimate interest in preventing spam and automated abuse.

Who processes it (sub-processors)

We use a small number of providers that process data on our behalf under a data processing agreement:

Cloudflare (content delivery, security, and the Turnstile anti-bot check); Resend (delivery of your message to our inbox); Google Workspace (our email inbox); and Hetzner (website hosting, in the EU). None of them use your data for their own purposes.

International transfers

Some providers (Cloudflare, Resend, Google) are based in the United States. Where data leaves the EU/EEA, the transfer relies on the European Commission Standard Contractual Clauses or an adequacy decision, as applicable.

How long we keep it

We keep the data from your enquiry only as long as needed to handle it and any reasonable follow-up, and then delete it. Technical and security logs are short-lived.

Cookies

This website sets no advertising or tracking cookies. Only strictly necessary cookies may be set by Cloudflare (security) and by the Turnstile check when you use the form; these are exempt from consent. Any usage analytics we run is cookieless. For that reason there is no cookie consent banner.

Your rights

You can ask to access, correct, delete, restrict, or object to the processing of your data, and to receive it in a portable format. You can withdraw consent at any time.

To exercise any of these, write to [email protected]. You also have the right to complain to your data protection authority (in Spain, the Agencia Española de Protección de Datos, aepd.es).

Changes

We may update this policy. The date at the top reflects the current version.