1. Data controller
- Owner: Gonzalo Palma Huarte
- Tax ID (NIF): 05952384F
- Address: Avenida de Monasterio de Silos 92, 28049 Madrid, España
- Email: gpalma@stratalabai.com
- Website: stratalabai.com
2. What we process and why
| What we collect | Why | Legal basis | Retention |
|---|---|---|---|
| Email address (launch list form) | To notify you of the STRATA OS launch | Your consent (art. 6(1)(a) GDPR) | Until you unsubscribe, or up to 2 years after launch |
| Name, email, company and message (contact form) | To answer your enquiry and, where applicable, prepare a quotation | Your consent and pre-contractual steps (art. 6(1)(a) and 6(1)(b) GDPR) | For the duration of the relationship and thereafter the limitation period for legal claims |
| Data you send us by email | To handle your communication | Your consent (art. 6(1)(a) GDPR) | For as long as needed to handle it |
3. What we do NOT do
- We do not sell or transfer your data to third parties for commercial purposes.
- We do not build profiles or make automated decisions with legal effects on you.
- We use no analytics, advertising or tracking cookies.
- We send no marketing communications other than what you signed up for.
4. Recipients
Your data may be processed by the following providers, acting as processors under a contract signed in accordance with art. 28 GDPR:
| Provider | Purpose | Location |
|---|---|---|
| Vercel Inc. | Website hosting | USA, under Standard Contractual Clauses and the EU-US Data Privacy Framework |
| Google Ireland Ltd. | Email (Google Workspace) | Ireland (EU) |
| Supabase, Inc. | Database for the launch list and contact messages | Germany (EU) — servers in Frankfurt, eu-central-1 |
5. International transfers
Site hosting is provided on infrastructure that may involve processing in the United States. That transfer relies on Standard Contractual Clauses approved by the European Commission and on the provider adhering to the EU-US Data Privacy Framework.
The site's fonts are hosted on our own server, so browsing does not transfer your IP address to external font providers.
6. Your rights
You may exercise the following rights at any time by writing to gpalma@stratalabai.com, stating the right you are exercising and attaching a copy of an identity document:
- Access: know what data of yours we process.
- Rectification: correct inaccurate data.
- Erasure: ask us to delete it.
- Objection: object to a specific processing.
- Restriction: ask us to suspend processing.
- Portability: receive your data in a structured format.
- Withdraw consent at any time, without affecting the lawfulness of prior processing.
7. Complaints to the supervisory authority
If you believe the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid — www.aepd.es).
8. Security
We apply technical and organisational measures appropriate to the risk: encryption in transit via HTTPS, restricted access to data, and providers with contractual security guarantees.
9. Minors
The site is aimed at professionals and businesses. It is not intended for children under 14 and we do not knowingly collect their data.