Privacy Policy

1. Data Controller

2. Data We Collect

At dForts we collect and process the following personal data:

Type of data	Purpose	Legal basis
Name and surname	Management of contact requests	Consent (Art. 6.1.a GDPR)
Email	Communication and response to inquiries	Consent (Art. 6.1.a GDPR)
Company	Personalisation of response	Consent (Art. 6.1.a GDPR)
Phone	Direct contact if necessary	Consent (Art. 6.1.a GDPR)
Message/inquiry	Handling information requests	Consent (Art. 6.1.a GDPR)
Anti-spam verification data (IP address, browser characteristics)	Telling people apart from automated programs when the contact form is submitted	Legitimate interest (Art. 6.1.f GDPR)
Browsing data (cookies)	Website usage analysis	Consent (Art. 6.1.a GDPR)

3. Purpose of Processing

Your personal data will be processed for the following purposes:

• Query management: Respond to information requests received through the contact form.
• Commercial communication: Send you information about our services if you have given your express consent.
• Web analytics: Improve user experience through browsing behaviour analysis (with your consent for analytical cookies).
• Contact form security: Verify, through the Cloudflare Turnstile service, that a submission comes from a person and not an automated program, to prevent spam and abuse of the form.
• Legal compliance: Comply with applicable legal obligations.

4. Legitimation

The legal basis for processing your data is:

• Consent of the data subject (Art. 6.1.a GDPR) for processing contact form data and analytical cookies.
• Legitimate interest (Art. 6.1.f GDPR) for technical cookies necessary for website operation and for the anti-spam verification of the contact form (protecting the site from automated submissions).
• Compliance with legal obligations (Art. 6.1.c GDPR) when applicable.

5. Data Retention

Personal data will be retained for the following periods:

• Contact form data: Will be retained for 2 years from the last communication, unless you object to processing.
• Analytical cookie data: As established in our Cookie Policy (up to 2 years).
• Anti-spam verification data: dForts neither stores nor logs it. The IP address is used transiently, in memory only, to limit the number of submissions per minute, and Cloudflare processes it only for the duration of the check, under its own privacy policy.
• Data necessary for legal compliance: During the period established by applicable regulations.

6. Data Recipients

Your data may be communicated to:

• Technology service providers: Microsoft Azure (hosting and delivery of contact form messages), Google Analytics and Microsoft Clarity (web analytics, only with your consent) and Cloudflare, Inc. (anti-spam verification of the contact form through Turnstile). These providers are located in the EEA or have adequate international transfer mechanisms (Cloudflare, Google and Microsoft are certified under the EU-US Data Privacy Framework and apply standard contractual clauses).
• Public bodies: When there is a legal obligation.

No international data transfers will be made outside the EEA without the appropriate safeguards established by the GDPR.

7. Data Subject Rights

In accordance with the GDPR, you can exercise the following rights:

• Right of access: Know what personal data we are processing.
• Right of rectification: Request correction of inaccurate or incomplete data.
• Right of deletion: Request deletion of your data when no longer necessary.
• Right to object: Object to the processing of your personal data.
• Right to restriction: Request restriction of processing in certain circumstances.
• Right to data portability: Receive your data in a structured, commonly used format.
• Right to withdraw consent: At any time, without affecting the lawfulness of prior processing.

8. Security Measures

dForts has adopted the necessary technical and organisational measures to guarantee the security of your personal data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of technology, the nature of the stored data, and the risks to which they are exposed.

Among others, we apply:

• SSL/TLS encryption in all communications
• Hosting on secure infrastructure (Microsoft Azure)
• Restricted access to personal data only to authorised personnel
• Secure password policies and multi-factor authentication
• Periodic backups

9. Minors

This website is not intended for children under 14 years of age. We do not intentionally collect personal data from minors. If you are a parent or guardian and know that your child has provided us with personal data, please contact us.

10. Privacy Policy Updates

We may update this Privacy Policy occasionally. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "last updated" date.

11. Contact

For any questions about this Privacy Policy or about the processing of your personal data, you can contact us at:

• Email: info@dforts.com
• Address: C/ Safor nº5, Valencia, Spain
• Web: www.dforts.com