Privacy Policy

1. Data Controller

The data controller responsible for your personal data is Logicode Logistics S.L., with registered office in Madrid, Spain. You can contact us at [email protected] for any data protection inquiries.

2. Data Protection Contact

Logicode Logistics S.L. has not appointed a Data Protection Officer, as it is not required to do so under Article 37 of the GDPR or Article 34 of the LOPDGDD. For any matter related to the processing of your personal data, you may contact us at [email protected].

3. Data We Collect

When you use our contact form, we collect your name, email address, and any information you include in the subject and message fields. We also collect technical data such as your IP address and browser type for security purposes (reCAPTCHA). No special categories of personal data are collected.

4. Purpose of Data Processing

Your personal data is processed for the following purposes: responding to your inquiries and requests submitted through our contact form; managing the business relationship arising from your request; sending relevant communications about our services, only with your explicit consent; and complying with applicable legal obligations, including those arising from the Spanish National Security Framework (ENS).

5. Legal Basis

The legal basis for processing your data is your explicit consent given by accepting this privacy policy when submitting the contact form (Article 6(1)(a) GDPR), as well as our legitimate interest in responding to your inquiries (Article 6(1)(f) GDPR). In the case of contractual relationships, the basis shall be the performance of the contract (Article 6(1)(b) GDPR).

6. Data Retention

Your personal data will be retained for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. Contact form data is retained for a maximum of 24 months from your last interaction, unless a longer retention period is required by law. Activity logs and audit trails required by the ENS high category shall be retained for the legally established period.

7. Data Sharing

We do not sell your personal data. We may share your data with trusted service providers (processors) who assist us in operating our website and services, subject to appropriate confidentiality and data protection agreements. We may also disclose data when required by law or to protect our rights. All data processors comply with the security measures required by the ENS high category.

The processors we currently rely on are:

• Vercel Inc. (website hosting and infrastructure): processes technical data such as IP addresses and server request logs in order to serve the Website.
• Cloudflare, Inc. (content delivery network, DNS and network security): processes technical data such as IP addresses, as traffic to the Website passes through its network.
• Resend, Inc. (transactional email delivery): processes the data contained in the contact form in order to deliver the resulting message to Logicode.
• Google (Google Ireland Limited / Google LLC): provides the reCAPTCHA bot-protection service on the contact form, which processes technical data such as your IP address.

8. International Transfers

In the event of international data transfers outside the European Economic Area, adequate safeguards will be ensured in accordance with the GDPR, such as standard contractual clauses approved by the European Commission or adequacy decisions. In particular, some of the processors named above (such as Vercel, Cloudflare, Resend and Google) may process data on servers located outside the EEA, including in the United States; such transfers are governed by the appropriate safeguards under the GDPR, such as the European Commission’s standard contractual clauses and/or the EU–US Data Privacy Framework.

9. Data Subject Rights

Under applicable data protection legislation (GDPR and LOPDGDD), you have the right to access, rectify, erase, restrict processing, data portability, and object to the processing of your personal data. You may also withdraw your consent at any time without affecting the lawfulness of processing based on consent before withdrawal. To exercise these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

10. Security Measures — ENS High Category

In compliance with Royal Decree 311/2022 regulating the Spanish National Security Framework, Logicode Logistics S.L. implements security measures corresponding to the HIGH category. These include: encryption of data in transit (TLS 1.2/1.3) and at rest; role-based access control and the principle of least privilege; multi-factor authentication for access to systems processing personal data; access logging and auditing with full traceability; security incident management with notification to CCN-CERT; periodic risk analysis and impact assessments; business continuity and disaster recovery plans; and segregation of duties in system administration.

11. Record of Processing Activities

Logicode Logistics S.L. maintains a record of processing activities in accordance with Article 30 of the GDPR and ENS guidelines, which is available to the Spanish Data Protection Agency and the National Cryptologic Centre (CCN).

12. Data Breach Notification

In the event of a security breach affecting personal data, Logicode Logistics S.L. will notify the AEPD within a maximum of 72 hours of becoming aware of it, in accordance with Article 33 of the GDPR. When the breach is likely to result in a high risk to the rights and freedoms of data subjects, they will be informed without undue delay. Additionally, the CCN-CERT notification procedures established under the ENS will be followed.

13. Cookies and Tracking

This website uses Google reCAPTCHA to protect our contact form from abuse. reCAPTCHA may set cookies and collect usage data in accordance with Google’s privacy policy. For more information, please see our Cookies Policy.

14. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy regularly.