[ES] Privacy Policy

[ES] Data Controller

[ES] IntruForce, S.L. is the data controller for the personal data processed through this website and our services. We are a company established in Spain, within the European Union, and subject to the General Data Protection Regulation (GDPR).

[ES] Data We Collect

[ES] We collect the following categories of personal data:

• [ES] Contact information: name, email address, phone number, and company name when you fill out forms on our website.
• [ES] Account data: email address, password (hashed), and profile information when you create an IntruForce account.
• [ES] Usage data: pages visited, features used, scan history, and interaction data collected through our platform.
• [ES] Technical data: IP address, browser type, device information, and operating system collected automatically when you visit our website.
• [ES] Communication data: messages, support requests, and feedback you send to us.

[ES] How We Use Your Data

[ES] We process your personal data for the following purposes:

• [ES] To provide and maintain our vulnerability scanning and security monitoring services.
• [ES] To communicate with you about your account, support requests, and service updates.
• [ES] To improve our website, platform, and services based on usage patterns.
• [ES] To send you marketing communications (only with your explicit consent).
• [ES] To comply with legal obligations, including EU cybersecurity and data protection regulations.

[ES] Legal Basis for Processing

[ES] Under GDPR Articles 6 and 7, we process your data based on:

• [ES] Contract performance: processing necessary to deliver the services you requested.
• [ES] Legitimate interest: improving our services, ensuring security, and preventing fraud.
• [ES] Consent: marketing communications and non-essential cookies.
• [ES] Legal obligation: compliance with applicable EU and Spanish laws.

[ES] Data Storage and Security

[ES] Your data is stored on secure servers within the European Union. We implement industry-standard technical and organizational measures to protect your personal data, including encryption in transit and at rest, access controls, and regular security audits. We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law.

[ES] Your Rights Under GDPR

[ES] Under GDPR Articles 13-22, you have the following rights regarding your personal data:

• [ES] Right of access: request a copy of your personal data.
• [ES] Right to rectification: correct inaccurate or incomplete data.
• [ES] Right to erasure: request deletion of your data ("right to be forgotten").
• [ES] Right to restrict processing: limit how we use your data.
• [ES] Right to data portability: receive your data in a machine-readable format.
• [ES] Right to object: object to processing based on legitimate interest or for direct marketing.
• [ES] Right to withdraw consent: withdraw consent at any time without affecting prior processing.

[ES] To exercise any of these rights, contact us at the email address below. We will respond within 30 days as required by GDPR.

[ES] Cookies

[ES] Our website uses cookies to provide essential functionality and improve your experience. Essential cookies are required for the website to function and cannot be disabled. Analytics cookies help us understand how you use our site and are only set with your consent. You can manage your cookie preferences at any time through your browser settings.

[ES] Third-Party Services

[ES] We may share your data with trusted third-party service providers who assist in operating our platform, including cloud hosting providers (EU-based), email service providers, and analytics tools. All third parties are bound by data processing agreements compliant with GDPR Article 28.

[ES] International Transfers

[ES] We primarily process data within the European Economic Area (EEA). If any data transfer outside the EEA is necessary, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

[ES] Contact Us

[ES] If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact us at:

[ES] You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or your local supervisory authority.