edalso Privacy Policy
Last updated: 1 November 2026
In this policy we explain what personal data we process at edalso, for what purposes, for how long and what rights you have. We have written it so that it can be understood without being a lawyer.
edalso works only with businesses and professionals. That is why the people whose data we process are mainly professionals: the contact persons at our clients, distributors and suppliers, and people who write to us through the website.
1. Who the controller is
Edalso Technologies, S.L. (“edalso”) Tax ID (NIF) B16898900 Calle Pompeu Fabra, 20, 08232 Viladecavalls (Barcelona, Spain) Registered in the Barcelona Commercial Registry, volume 48005, folio 91, sheet B 569190 Email: info@edalso.com
edalso has not appointed a data protection officer. For any question about your data, write to us at info@edalso.com.
2. What data we process and why
| Purpose | What data | Why we may process it (legal basis) | How long |
|---|---|---|---|
| Responding to what you ask us for in the contact form (a demo, a project, becoming a partner or another enquiry) | Name, email address, company, telephone (if you provide it), professional profile, reason for the enquiry and message | Dealing with your request and, where appropriate, preparing an offer (taking pre-contractual steps at your request) | 12 months from your last contact, if you do not become a client. If you do, the data is then processed as client data |
| Managing our relationship with our clients, distributors and suppliers (contracts, orders, invoicing, support and service communications) | Name, job title, email, telephone and company of contact persons; billing data | Performing the contract with the company you work for (our legitimate interest in maintaining that relationship) and complying with legal obligations, such as accounting and tax obligations | For as long as the relationship lasts and, afterwards, for the periods required by law (for example, 6 years for accounting records) |
| Sending you news and commercial communications about edalso by email | Name and email address | If you are a client: our legitimate interest in informing you about products and services similar to those you already have, as permitted by law. If you are not a client: your consent, which you give by ticking the corresponding box on the form | Until you unsubscribe. You can do so at any time using the link included in every email or by writing to info@edalso.com |
| Assessing your application if you send us your CV | The data in your CV and in our conversations with you | Your consent, when you send it to us | 12 months, so that we can consider you for future recruitment processes, unless you ask us to delete it sooner |
| Responding to people who interact with our social media profiles (for example, LinkedIn) | The public data on your profile and the messages you send us | Our legitimate interest in replying to you | For as long as you follow our profile or as long as necessary to reply to you. Each social network also processes your data according to its own policy |
| Keeping the website secure and working | IP address, browser type and pages visited, in the server’s technical logs | Our legitimate interest in protecting the website and preventing abuse | For as long as our hosting provider keeps the logs, usually a few weeks |
| Understanding how the website is used (visitor statistics with Google Analytics) | Browsing data and cookie identifiers. According to Google, Google Analytics 4 does not log or store full IP addresses | Your consent, which you give in the cookie notice. If you do not give it, Google Analytics is not activated | As set out in the cookie policy |
We do not make automated decisions about you or build commercial profiles. We do not buy databases or send commercial communications to anyone who has not allowed us to.
3. If you use the edalsoBMS platform or the Edalso app
If you are a user of the edalsoBMS platform or of the Edalso mobile app, the company that gave you access (our client) is the controller of your data. edalso processes it on behalf of that company, as processor, under the contract it has signed with us.
Therefore, to find out what data about you is processed on the platform or to exercise your rights, please contact that company. If you write to us, we will pass your request on to them.
4. Who we share your data with
We do not sell your data. We only share it with:
- Providers who help us deliver our services, who process the data on our behalf and following our instructions: hosting of the website and our systems, email and office tools (Microsoft), email sending (Mailjet), website statistics (Google Analytics), and accounting, tax and legal advisers.
- Public authorities, judges and courts, when required by law (for example, the Spanish Tax Agency).
- Banks, to manage collections and payments.
- In the event of a sale or merger of the company or of part of its business, the acquirer, who will remain bound by this policy.
5. Transfers outside the European Union
Some providers belong to groups headquartered in the United States (for example, Google and Microsoft). When they process data outside the European Economic Area, or may access it from outside, they do so with the safeguards required by law: the European Commission’s adequacy decision for the EU-US Data Privacy Framework or the standard contractual clauses approved by the Commission. You can ask us for more information at info@edalso.com.
6. Your rights
You can exercise the following rights at any time:
- Access: find out what data of yours we process.
- Rectification: correct inaccurate data.
- Erasure: ask us to delete your data.
- Objection: ask us to stop processing it, for example for sending you commercial communications.
- Restriction: ask us, in certain cases, only to store it without using it.
- Portability: receive your data in a format you can take to another company.
- Withdraw your consent, where that is the basis for the processing, without affecting what we did before.
How: write to us at info@edalso.com or by post to our address, stating which right you wish to exercise. We will only ask you for a document proving your identity if we have reasonable doubts about who you are. We will reply within one month at the latest.
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) (www.aepd.es).
7. Security
We apply technical and organisational measures to protect your data against loss, unauthorised access or alteration. For example: encrypted connections, access limited to the people who need it and confidentiality commitments from our staff.
8. Changes to this policy
We may update this policy to adapt it to changes in the law or in our services. We will always show the date of the last update at the top. If the change is significant, we will announce it on the website or, if you are a client, by email.