Book a demo
EN
Book a demo

Privacy Policy

In this policy we explain what personal data we process when you use pekata.nl, for what purpose, for how long and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).

1. Data controller

  • Company name: Reloting, S.L. (trade name: Pekata)
  • NIF: B19932771
  • Registered office: C/ Casanova 270, Ático 1ª, 08021 Barcelona (Spain)
  • Email: [email protected]
  • Domain name: pekata.nl

Reloting, S.L. is not required to appoint a Data Protection Officer under Article 37 of the GDPR. For any matter relating to this policy you may contact us at the email address indicated.

2. What data we process and for what purpose

a) Contact form

  • Data collected: name, email, company, telephone (optional), number of employees, indicative budget and comments.
  • Purpose: to handle your request for information or a quote and to send you the commercial information you request about our services.
  • Legal basis: your consent (art. 6.1.a GDPR), which you give by ticking the acceptance box, and the application of pre-contractual measures at your request (art. 6.1.b GDPR).
  • Catalogue: if you only ask for the catalogue, we ask for your name, your work email and a phone number. We do not show it to you straight away: we email you a personal link, valid once, that opens the catalogue. That is how we check the email is yours, and until you open it we do not tell our sales team. Afterwards we write to you to ask whether you would like a proposal. If you reply, we carry on the conversation; if not, we send at most one reminder and do not write to you again. From the catalogue itself you can ask us for a proposal by telling us how many people it would be for and, if you wish, an indicative budget: in that case we handle your request like one sent through the contact form. To prepare it we may complete your request with public information about your company (name, activity and approximate size), which we look up from the domain of your work email.

b) Demonstration access ("Try us")

  • Data processed: when you request a demo, a temporary demonstration access is created; technical data about the request (IP address) is recorded for security and abuse-limitation purposes.
  • Purpose: to provide you with trial access to the platform.
  • Legal basis: application of pre-contractual measures at your request (art. 6.1.b GDPR).

c) Browsing the website

With your consent we use analytics and advertising cookies (Google Analytics 4 and Google Ads, loaded via Google Tag Manager) and Google's reCAPTCHA service to protect the form against automated abuse. You will find the details in the Cookie Policy.

We also measure the use of the contact form in aggregate and without cookies: when it is displayed, started or submitted, your browser makes a request to our own server, which is kept in its access logs together with the technical data of any request (IP address, page and date). We store nothing on your device and do not use it to identify you: it tells us which pages work so that we can improve them, on the basis of our legitimate interest (art. 6.1.f GDPR). We do the same with the catalogue form.

3. Retention periods

We keep your data while your request is being handled and, if you consent to receive commercial information, until you withdraw your consent or object to the processing. Once consent is withdrawn or erasure is carried out, the data will be blocked —available exclusively to judges, courts and public authorities— during the limitation periods of any potential liabilities (art. 32 LOPDGDD) and will be destroyed thereafter.

4. Recipients and data processors

We do not transfer your data to third parties, except where legally required. To provide the service we rely on data processors with whom we have entered into the contracts required under Article 28 of the GDPR:

  • Hetzner Online GmbH (Germany): hosting of the website and of our platform, within the European Economic Area.
  • Google Ireland Limited (Ireland): web analytics, advertising tags and the reCAPTCHA service, subject to prior cookie acceptance.

5. International transfers

If advertising cookies are accepted, we also use the Meta pixel (Meta Platforms Ireland Limited, Ireland) to measure the effectiveness of our campaigns on Facebook and Instagram. This may involve transfers of data to Meta Platforms, Inc. (United States), covered by the adequacy decision on the EU-U.S. Data Privacy Framework, under which Meta is certified. The details are in the Cookie Policy.

If advertising cookies are accepted, we also use the OpenAI Ads measurement pixel (OpenAI Ireland Limited, Ireland) to measure the effectiveness of our campaigns in ChatGPT. This may involve transfers of data to OpenAI OpCo, LLC (United States), covered by the safeguards provided for in the GDPR, such as the standard contractual clauses approved by the European Commission. The details are in the Cookie Policy.

Google's services may involve transfers of data to Google LLC (United States). Such transfers are covered by the adequacy decision of the EU-U.S. Data Privacy Framework (EU-U.S. Data Privacy Framework), under which Google is certified.

6. Your rights

You may exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and portability, as well as withdraw the consent given without this affecting the lawfulness of the prior processing. Simply write to [email protected] stating the right you wish to exercise; we may ask you for additional information to confirm your identity.

If you consider that we have not properly handled your rights, you may lodge a complaint with the Agencia Española de Protección de Datos (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid).

7. Security

We apply appropriate technical and organizational measures to ensure a level of security appropriate to the risk, protecting the data against unauthorized access, loss, destruction or accidental damage.