Privacy Policy

1. Controller

The controller responsible for processing your personal data is:

2. Data We Collect

We collect personal data only when you actively provide it to us:

• Contact form: First name, last name, email address, company name, role, and the content of your message.
• Email correspondence: Any personal data included in emails you send to us.
• Server logs: IP address, browser type, pages visited, and timestamps — automatically recorded by our hosting provider (Vercel) for security and stability purposes.

We do not use tracking pixels, advertising cookies, or third-party analytics services.

3. Purpose and Legal Basis

4. Retention Periods

Contact form submissions and related correspondence are retained for up to 3 years from the date of last contact, after which they are permanently deleted, unless a longer retention period is required by law (e.g. commercial or tax record-keeping obligations of up to 10 years under Spanish law).

Server log data is retained for a maximum of 30 days.

5. Recipients of Your Data

We share your data only where necessary:

• Vercel Inc.: Our website hosting provider (US). Data transfers are covered by the EU–US Data Privacy Framework and Standard Contractual Clauses.
• Resend Inc.: Email delivery service used to send and receive contact form notifications (US). Standard Contractual Clauses apply.
• Supabase Inc.: Database infrastructure for storing contact submissions (US). Standard Contractual Clauses apply.

We do not sell, rent or otherwise share your personal data with third parties for their own commercial purposes.

6. Cookies

This website uses only technically necessary cookies required for basic functionality (session management for the admin area). We do not use analytics, marketing or tracking cookies. No cookie consent is required for technically necessary cookies under Art. 5(3) of the ePrivacy Directive.

7. Your Rights

Under the GDPR you have the following rights regarding your personal data:

• Right of access (Art. 15): Request a copy of the data we hold about you.
• Right to rectification (Art. 16): Request correction of inaccurate data.
• Right to erasure (Art. 17): Request deletion of your data ("right to be forgotten").
• Right to restriction (Art. 18): Request that we limit how we use your data.
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
• Right to object (Art. 21): Object to processing based on legitimate interest.

To exercise any of these rights, contact us at info@terravena.eu. We will respond within 30 days.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. In Spain, the competent authority is:

If you are located in another EU member state, you may also contact your local supervisory authority.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in law or our data practices. The date at the top of this page indicates when it was last revised. We encourage you to review this page periodically.