Privacy policy

Last updated: September 2026

1. Data controller

2. Data we collect and why

Contact form. When you fill in the contact form we collect: name, company (optional), email address and the message you send us. We use this data exclusively to respond to your enquiry and arrange an initial conversation.

Analytics cookies. If you consent, we use Google Analytics (GA4) to collect aggregated and anonymous browsing data (pages visited, visit duration, device). See the cookie policy for more detail.

3. Legal basis for processing

Processing of contact form data is based on the legitimate interest in responding to enquiries received (Art. 6.1.f GDPR) and the consent you provide by submitting the form. Processing of analytics data is based on the explicit consent you grant through the cookie banner.

4. Retention period

Contact form data is retained for as long as necessary to manage your enquiry and, if a business relationship exists, for its duration. Event-level analytics data is retained for 14 months in Google Analytics; aggregated reports contain no personal data.

5. Recipients

We do not share your data with third parties, except where required by law. Form data is processed via Google Workspace (Google LLC) under the guarantees of the EU-US framework. Analytics data is transmitted to Google LLC under the same guarantees.

6. Your rights

You can exercise the following rights against the data controller:

  • Access: find out what data we hold about you.
  • Rectification: correct inaccurate data.
  • Erasure: request that we delete your data.
  • Portability: receive your data in a structured format.
  • Objection and restriction: object to certain processing or restrict it.
  • Withdrawal of consent: at any time, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, write to martin@helliumlab.com indicating the right you wish to exercise and attaching a copy of your ID or equivalent document.

If you consider that processing violates the applicable regulations, you may lodge a complaint with the Spanish Data Protection Agency (AEPD): aepd.es.

7. Changes to this policy

We may update this policy to reflect regulatory changes or changes to our services. We recommend reviewing it periodically. The date of the last update appears at the top of this document.