← Back to KivoLab

Privacy policy

Last updated: August 2026.

1. Data controller

The controller responsible for personal data collected through this website is Edgar Garrido Fernández, operating under the KivoLab brand.

2. Data processed

The form requests a name, email address, reason for contacting, message and, optionally, country. It may also include technical attribution data such as page language, originating page, referrer and UTM campaign parameters. Information voluntarily supplied by email or through other linked channels may also be processed.

3. Purposes

4. Legal basis

Processing resulting from the form or direct contact is based on the data subject's consent. Compliance with legal obligations is based on the applicable regulations. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out beforehand.

5. Retention

Data will be retained for as long as necessary to respond to and manage the contact or collaboration and, subsequently, for the periods required to address potential legal liabilities. It will not be used to create commercial databases or advertising campaigns.

6. Recipients and service providers

Data will not be disclosed to third parties unless legally required. Hosting, email, form and analytics providers may process data in order to operate the website, subject to their own conditions and the applicable agreements. The form is processed through FormSubmit.

7. International transfers

Some technology providers may process information outside the European Economic Area. Where applicable, they must use safeguards recognised by law, such as adequacy decisions or standard contractual clauses.

8. Rights

Users may request access, rectification, erasure, objection, restriction and portability of their data, and may withdraw their consent, by writing to hola@kivolab.es. They may also lodge a complaint with the Spanish Data Protection Agency.

9. Security

Reasonable technical and organisational measures are used to protect information against unauthorised access, loss or misuse, although absolute security on the internet cannot be guaranteed.