At DGTALIT, we take the protection of your personal data seriously. This policy clearly explains what information we collect when you interact with us through our website, WhatsApp Business, our tools (including OrbiSUITE) or any other channel, what we use it for, who we share it with, and what rights you have regarding it.
This policy complies with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and with Spanish Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).
1. Data Controller
The controller responsible for the processing of your personal data is:
- Company name: DGTALIT LLC
- Activity: digital marketing agency and business software development
- Location of operations: Spain
- Contact email: info@dgtalit.com
For any questions about the processing of your data, or to exercise your rights, you can write to us at the email address above.
2. Personal Data We Collect
Depending on how you interact with us, we may collect the following data:
- Identification and contact data: first and last name, phone number, email address, company or business you represent.
- Content of communications: messages you send us via WhatsApp Business, website contact forms, OrbiSUITE chat or other channels, including the conversation history.
- Appointment and scheduling data: date, time and reason for appointments you make with us or with our clients through OrbiSUITE.
- Technical data: IP address, browser and device type, pages visited and browsing time on our website.
- Cookies and similar technologies: session and analytics identifiers (see section 10).
- Billing data: when you hire our services, data necessary for billing and payment, managed through our payment gateway.
We do not collect special categories of data (health, ideology, religion, sexual orientation, etc.) unless you voluntarily include them in a message, in which case we ask you to avoid sharing this type of information with us.
3. Purposes of Processing
We process your personal data for the following purposes:
- Customer service and support: to respond to your queries, questions or requests for information about our services.
- Appointment management: to schedule, confirm, modify or cancel appointments through OrbiSUITE or other scheduling channels.
- Contract performance: to provide the contracted services (web development, online stores, SEO, CRM/SaaS, AI solutions) and manage the corresponding billing.
- Marketing and commercial communications: to send you information about our services, news or offers, only when you have given us your express consent to do so.
- Compliance with legal and tax obligations: retention of invoices and accounting documentation in accordance with Spanish commercial and tax regulations.
- Improvement of our services: analysis of the use of the website and our tools to improve the user experience.
4. Legal Basis for Processing
The legal basis legitimizing each of the above processing activities is as follows:
- User consent (Art. 6.1.a GDPR): for sending commercial and marketing communications, and for the use of non-essential cookies.
- Performance of a contract or pre-contractual measures (Art. 6.1.b GDPR): to handle commercial inquiries, manage appointments and provide the contracted services.
- Legitimate interest (Art. 6.1.f GDPR): to improve our services and ensure the security of our platforms, provided your rights and interests do not prevail.
- Legal obligation (Art. 6.1.c GDPR): for the retention of tax and accounting documentation in accordance with the Spanish General Tax Law and Commercial Code.
5. Recipients and Data Processors
To provide our services, we share certain data with providers acting as data processors, always under contract and with the guarantees required by the GDPR:
- Meta Platforms, Inc. (WhatsApp Business / Meta Cloud API): to manage the conversations you have with us or with our clients via WhatsApp.
- Google LLC (Google Calendar): for appointment and schedule management.
- Stripe, Inc.: for payment processing and billing.
- OpenAI, L.L.C.: as the artificial intelligence technology provider used by OrbiSUITE to process and respond to conversations.
- Hosting provider: for hosting our website and the applications that provide the service.
Some of these providers are located in the United States, which involves an international transfer of data outside the European Economic Area. These transfers are carried out under the Standard Contractual Clauses approved by the European Commission, or other adequate safeguards recognized by the GDPR, ensuring a level of protection equivalent to that of Europe.
We do not sell or transfer your personal data to third parties for commercial purposes other than those described in this policy. We only share data with third parties when there is a legal obligation requiring us to do so (for example, requests from public authorities or courts).
6. Data Retention Periods
We retain your personal data for the following periods:
- Inquiries and commercial messages that do not result in a contractual relationship: up to 12 months from the last contact, unless you request earlier deletion.
- Data of clients with an active contract: for the entire duration of the contractual relationship and, after its termination, for the applicable legal periods.
- Tax and accounting documentation (invoices, proof of payment): 6 years from issuance, in accordance with the Spanish Commercial Code, which may be extended to the applicable tax statute-of-limitations periods (up to an additional 4 years).
- Data processed on the basis of your consent (marketing): until you withdraw such consent.
- Browsing and cookie data: according to the periods indicated in the cookies section.
Once these periods have elapsed, your data is securely deleted or anonymized, unless there is a legal obligation requiring its blocking or retention for an additional period.
7. Your Rights as a User
The GDPR and the LOPDGDD grant you the following rights over your personal data:
- Access: to know what data of yours we process.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to request the deletion of your data when it is no longer necessary.
- Objection: to object to the processing of your data, in particular for direct marketing.
- Portability: to receive your data in a structured, commonly used format, or to request its transfer to another controller.
- Restriction of processing: to request that we restrict the use of your data in certain circumstances.
- Withdraw consent: at any time, without affecting the lawfulness of processing prior to withdrawal.
You can exercise any of these rights by sending an email to info@dgtalit.com, indicating the right you wish to exercise and attaching, if necessary, documentation proving your identity.
8. Security Measures
We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration or improper disclosure, including:
- Encryption of communications (HTTPS/TLS protocol) on our website and applications.
- Access control to systems through individual credentials and permissions limited according to each person’s role.
- Use of technology providers that comply with recognized security and data protection standards.
- Periodic backups of information.
- Continuous review and update of our security measures in line with evolving threats.
9. Complaints to the Supervisory Authority
If you believe that the processing of your personal data does not comply with applicable regulations, you have the right to file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), through its website www.aepd.es.
Before contacting the AEPD, we invite you to contact us at info@dgtalit.com to try to resolve any question or issue directly.
10. Use of Cookies
Our website uses first-party and third-party cookies for its proper functioning, for analytical purposes and, where applicable, to display personalized content. You can review the details of the cookies we use, their purpose, and how to manage or disable them in our Cookie Policy.
11. Changes to This Policy
We may update this Privacy Policy to adapt it to legislative or case-law developments, or to changes in our services. We recommend reviewing it periodically. Any relevant change will be communicated to you through our usual channels.
Last updated: August 25, 2026