Privacy policy
Last updated: October 14, 2026
Data controller
- Controller: Jose Alberto Aguiló Escámez (Pep Aguiló), trading as niguls.
- Tax ID (NIF): 43127697Y
- Address: Carrer d'es Canyar, 59, 07141 Marratxí
- Email: hola [at] niguls.com
What data we process
If you submit the “Request an assessment” form, we process the data you provide: company, name, email and your message. The date, page language, IP address and browser type are recorded with the request.
To prevent automated submissions, the form uses Cloudflare Turnstile, which analyses technical browser and connection data (including the IP address) to tell people from bots.
If you email us, we process the data in your message.
All form fields are required: without them we cannot handle your request.
Purpose
- To reply to your request and, where appropriate, prepare a services proposal.
- To protect the form against spam and abuse.
We do not use your data to send you marketing you have not asked for, for profiling, or for automated decision-making.
This policy covers the form and our reply to your request. What happens next (preparing and signing the proposal, the contract and invoicing) is explained in the proposals privacy policy: propuestas.aguilo.cloud/privacidad.
Legal basis
- Pre-contractual steps at your request (art. 6.1.b GDPR): replying to your request and preparing the proposal you ask for.
- Legitimate interest (art. 6.1.f GDPR): anti-spam verification and security logs for the form.
Retention
We keep the request data while we handle it and delete it no later than 12 months after the last contact. If a proposal is prepared or a contract signed, its retention is governed by the policy at propuestas.aguilo.cloud/privacidad.
Processors
We do not share your data with third parties unless required by law. To provide the service, the following providers process it on our behalf under a data processing agreement:
- Cloudflare, Inc.: hosting of this site, bot verification (Turnstile) and forwarding of email sent to hola [at] niguls.com.
- Vercel Inc.: hosting of the application that receives and manages requests, in the EU region (Dublin).
- Upstash, Inc.: database where requests are stored, in the EU (Dublin).
- Resend, Inc.: sending the internal email alert when a request arrives.
- Google Ireland Limited (Google Workspace): inbox where emails and alerts are received.
International transfers
Some of these providers are US companies or may access the data from the US. These transfers rely on the EU-US Data Privacy Framework, where the provider is certified, or on the standard contractual clauses approved by the European Commission.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time by writing to hola [at] niguls.com. We will reply within one month.
If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Cookies
This site does not use its own cookies, nor analytics or advertising cookies. Turnstile processes technical browser data only for the bot verification described above.