Privacy policy

Cecile Umaña (Tangram), 43480 Tarragona, España.

Contact for data protection matters: cecile@thisistangram.com.

No Data Protection Officer (DPO) has been appointed, as the activity does not require one under Article 37 GDPR.

Through the contact form: name, email address, company (optional) and the content of your message.

Technical data collected automatically for security purposes: an irreversible hashed version of your IP address (used only to prevent spam and abuse of the form) and the language of the page.

If you contact us by email or LinkedIn, we process the data you choose to share with us.

To answer your enquiry and, where relevant, prepare a proposal — legal basis: your consent and/or the application of pre-contractual measures at your request (Art. 6.1.a and 6.1.b GDPR).

To protect the website against spam and abusive use — legal basis: legitimate interest in the security of the service (Art. 6.1.f GDPR).

We will only send you commercial communications if you have expressly requested them.

Enquiries are kept for as long as needed to handle the conversation and, afterwards, for up to two years for evidence purposes. Data linked to a contractual relationship is kept for the legally required periods (generally six years for accounting and tax obligations).

Data is stored on infrastructure provided by our hosting and database processors, which act on our instructions under a data processing agreement and may process data on servers located inside or outside the EEA with appropriate safeguards (Standard Contractual Clauses).

We do not sell your data and we do not share it with third parties except where legally required.

You may request access, rectification, erasure, restriction, portability or object to the processing of your data by writing to cecile@thisistangram.com, stating your request and attaching a copy of an identity document where necessary.

You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es.

We apply appropriate technical and organisational measures to protect your data, including encrypted transmission (HTTPS), access controls and row-level security on our database.

This website is aimed at professionals. We do not knowingly collect data from people under 14 years of age.