Privacy Policy
1. Data Controller
The data controller responsible for processing your personal data is:
Overthings, S.L.
NIF: B57925703
Pl. Alexandre Jaume 3, 2
07002 Palma, Islas Baleares, Spain
2. Information we collect
We may collect the following types of personal information:
- Contact information: Name, email address, and any other information you provide through our contact form.
- Technical data: IP address, browser type, operating system, and other technical information collected automatically when you visit our website.
- Usage data: Information about how you use our website, including pages visited and time spent on each page.
3. Purpose of processing
We process your personal data for the following purposes:
- To respond to your inquiries and requests submitted through our contact form.
- To improve our website and services based on usage analytics.
- To comply with legal obligations.
- To protect our legitimate interests, including the security of our website.
4. Legal basis for processing
We process your personal data based on the following legal grounds:
- Consent: When you submit the contact form or accept cookies.
- Legitimate interest: For website analytics and security purposes.
- Legal obligation: When required by law.
5. Data retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws. Contact form submissions are retained for up to 2 years unless you request earlier deletion.
6. Your rights
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access: You can request a copy of your personal data.
- Right to rectification: You can request correction of inaccurate data.
- Right to erasure: You can request deletion of your personal data.
- Right to restrict processing: You can request limitation of processing in certain circumstances.
- Right to data portability: You can request transfer of your data to another controller.
- Right to object: You can object to processing based on legitimate interests.
To exercise any of these rights, please contact us using the information provided in Section 1.
7. Data sharing
We do not sell your personal data. We may share your data with trusted third-party service providers who assist us in operating our website and conducting our business, such as email service providers (Mailersend) and analytics services (Vercel Analytics). These providers are contractually obligated to protect your data.
8. International transfers
Some of our service providers may be located outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
9. Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.
10. Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.
11. Complaints
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD) at www.aepd.es.
Last updated: January 2026