Skip to content

Privacy policy

Last updated: 2026-07-11

This policy describes how EgaraLabs processes personal data collected through egaralabs.com, in compliance with the General Data Protection Regulation (GDPR) and Spanish LOPDGDD.

1. Data controller

Germán Cano (EgaraLabs), address Terrassa, Barcelona. Contact: info@egaralabs.com.

2. Purposes of processing

a) Managing inquiries received through the contact form (name, email, optional phone, and message) and responding to questions or quote requests. This is the sole purpose of the form.

b) If you use the scheduling link to book a meeting, managing the coordination of that appointment. When booking, you will be redirected to cal.eu (Cal.com), where the data needed for the appointment is collected.

c) If you accept analytics cookies, analyzing aggregated site usage via Google Analytics to understand what content works and improve the site.

Contact form and appointment data will not be used to send advertising or unsolicited commercial communications.

3. Legal basis

Processing of contact form data is based on the data subject's explicit consent, given by checking the acceptance box for this policy before submitting the form (Art. 6.1.a GDPR).

Appointment booking through the scheduling link (https://cal.eu/german-cano) is based on steps taken at the data subject's request prior to entering a contract (Art. 6.1.b GDPR), when voluntarily requesting a meeting.

Processing of analytics data via Google Analytics is likewise based on prior, express consent given through the cookie banner. Analytics cookies are never used without that consent.

4. Categories of data processed

Identification and contact data: name, email, phone (if provided).

Communication content: the message sent through the form.

Appointment data (only if you use the scheduling link on cal.eu): the information you provide on Cal.com's form, typically name, email, and appointment details.

Usage and browsing data (only if you accept analytics cookies): pages visited, device, browser, and anonymized IP, collected by Google Analytics.

5. Retention period

Contact form data is kept for as long as needed to handle the inquiry and, at most, 12 months from the last interaction, unless a longer legal period applies for potential liability claims.

Appointment data managed on Cal.com is kept for as long as needed to coordinate the meeting and, at most, 12 months from the appointment or last related interaction.

Google Analytics data is retained according to the Analytics property's configuration: 14 meses.

6. Recipients and data processors

Data is not shared with third parties except where legally required. The following providers act as data processors to the extent necessary to provide their services:

— Resend, Inc., for sending the email generated by the contact form. Resend may transfer data outside the European Economic Area under the safeguards set out in its standard contractual clauses.

— Cal.com, Inc. (cal.eu), for managing appointment bookings when you use the scheduling link. Cal.com may transfer data outside the European Economic Area under the safeguards set out in its standard contractual clauses.

— Vercel Inc., as the website hosting and infrastructure provider. Vercel may transfer data outside the European Economic Area under the safeguards set out in its standard contractual clauses.

— Google LLC, as the Google Analytics provider, if you accept analytics cookies. Google may transfer data outside the European Economic Area under the safeguards set out in its standard contractual clauses.

7. Rights of data subjects

You can exercise your rights of access, rectification, erasure, objection, restriction of processing, and portability by writing to info@egaralabs.com, stating which right you wish to exercise and attaching a copy of an ID document.

You have the right to withdraw your consent at any time. For analytics cookies, you can do so from the cookie banner or the "Change my cookie preferences" button on the Cookie Policy page. For contact form data, write to us at the address above; withdrawal will not affect the lawfulness of prior processing, but will mean we stop handling your inquiry if it has not yet been answered.

If you believe your rights have not been properly addressed, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).

8. Security measures

EgaraLabs applies reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or alteration, appropriate to the risk of the processing.

9. Cookies

For more detail on the cookies used on this site, see the Cookie Policy.

10. Automated decisions and profiling

We do not create user profiles or make automated decisions with legal or similarly significant effects on data subjects.