Privacy policy
Last updated:
This policy explains what personal data we process when you visit knotpicker.com or contact us, why we do it and what rights you have. It follows the EU General Data Protection Regulation (Regulation (EU) 2016/679, GDPR) and Spanish Organic Law 3/2018 on data protection and digital rights (LOPDGDD).
1. Who is responsible for your data
- Controller
- Carlo Mazzola
- NIE
- Z2985948R
- Address
- Avinguda de Madrid 49, 2-2, 08028, Barcelona, Spain]
- info@knotpicker.com
KnotPicker is a company in formation (a Spanish sociedad limitada, S.L., not yet incorporated). Until incorporation, this website is owned and operated by the natural person named above. When the company is incorporated, it will become the controller and we will update this policy.
2. What data we process, why, and on what legal basis
Contact form and email
When you use the contact form or write to us, we process your name, email address, the content of your message, the date and time, and your confirmation that you have read this policy.
- Purpose: to answer your request, for example a request for a pilot audit, and to follow up on it.
- Legal basis: your consent (Article 6(1)(a) GDPR), which you give by ticking the box in the form, and, when you ask about our services, steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
- Retention: we keep your messages for as long as we need them to handle your request and for up to 12 months after our last exchange, unless a business relationship starts, in which case we keep them for as long as the law requires.
The fields marked as required are needed to answer you. If you prefer not to use the form, you can write to info@knotpicker.com.
Visiting the website
When you visit the website, our hosting provider processes technical data that every browser sends, such as your IP address, the page requested, the date and time, the referring page and your browser type.
- Purpose: to deliver the website, keep it secure and protect it from attacks and abuse.
- Legal basis: our legitimate interest in running a secure website (Article 6(1)(f) GDPR).
- Retention: short-term security logs kept by the hosting provider under its own retention rules.
Statistics
We use Cloudflare Web Analytics to count visits and see which pages are read. It does not use cookies or similar storage on your device and does not track you across websites. We only see aggregated figures, such as the number of visits per page and country, and we cannot identify you.
- Legal basis: our legitimate interest in understanding, in aggregate, how the website is used (Article 6(1)(f) GDPR).
We do not use your data for automated decision-making or profiling, and we do not sell it.
3. Who processes data on our behalf
We use the following service providers. They act as data processors: they process data only on our instructions and under a data processing agreement.
| Provider | Service | Location and safeguards |
|---|---|---|
| Cloudflare, Inc. | Hosting (Cloudflare Pages), content delivery, security and Web Analytics | Global network; USA. EU-U.S. Data Privacy Framework and Standard Contractual Clauses. |
| Formspree, Inc. | Receiving contact form submissions and forwarding them to our mailbox | USA. Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework. Submissions are kept in Formspree's archive for a limited time (30 days on our current plan). |
| Microsoft Ireland Operations Ltd. | Email (Microsoft 365) | European Union. Any transfer outside the EU is covered by the EU-U.S. Data Privacy Framework and Standard Contractual Clauses. |
Apart from these providers, we do not share your data with third parties, unless we are legally required to do so, for example at the request of a court or a public authority.
4. Cookies
This website does not use advertising, tracking or analytics cookies, so we do not ask for cookie consent. Our hosting provider, Cloudflare, may set a strictly necessary security cookie (such as __cf_bm or cf_clearance) only when it needs to tell people and bots apart to protect the website. These cookies are exempt from consent under Article 22(2) of Spanish Law 34/2002 (LSSI-CE).
The contact form sends your message directly to Formspree from your browser, without loading any Formspree script and without cookies. If your browser has JavaScript turned off, the form takes you to a Formspree confirmation page, where Formspree's own privacy policy applies.
5. Your rights
You can, at any time and free of charge:
- access the personal data we hold about you;
- ask us to correct inaccurate data or erase it;
- object to processing based on our legitimate interest, or ask us to restrict processing;
- receive your data in a portable format;
- withdraw your consent, without affecting the lawfulness of processing carried out before you withdrew it.
To exercise these rights, write to info@knotpicker.com. We may ask you to prove your identity. We will reply within one month.
If you think we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or with the data protection authority of the EU country where you live.
6. Minors
Our services are aimed at companies. We do not knowingly collect data from people under 14. If you are under 14, please do not send us personal data.
7. Security
The website is served only over encrypted connections (HTTPS). We apply technical and organizational measures appropriate to the risk, and we limit access to your data to the people who need it to answer you.
8. Changes to this policy
We may update this policy, for example when the company is incorporated or when we change providers. The date at the top shows the latest version.