Privacy Policy
Last updated: May 17, 2026
1. Data controller
KANVALROD, S.L., owner of the Controlá brand, is the entity responsible for processing personal data collected through this website.
- Company name: KANVALROD, S.L.
- Tax ID (NIF): B56431752
- Registered office: Avenida Diagonal, 590, 2º 2ª, 08021 Barcelona, Spain
- Contact email: info@controla.cloud
- Companies Register: Barcelona, Volume 49036, Sheet 155, Page B-605386
A Data Protection Officer (DPO) is not required under Article 37 of the GDPR.
2. Data we collect
2.1 Contact form data
When you fill in the contact form on any page, we collect: name, hotel or company, email, phone (optional) and message (optional).
2.2 Browsing data
When you give consent, we collect information about your use of the site: IP address (anonymised by Google Analytics), browser type, device and operating system, pages visited and time on each page, traffic source (referer), interaction events and, optionally, anonymised session recordings (only if you accept the "experience" category).
3. Purpose and legal basis
| Purpose | Legal basis |
|---|---|
| Responding to your enquiry or demo request | Pre-contractual measures (Art. 6.1.b GDPR) |
| Sending commercial communications (only with consent) | Consent (Art. 6.1.a GDPR) |
| Statistical analysis of site usage | Consent (Art. 6.1.a GDPR) |
| Experience improvement (session recordings) | Consent (Art. 6.1.a GDPR) |
| Complying with legal obligations (tax, accounting) | Legal obligation (Art. 6.1.c GDPR) |
4. Retention period
- Contact form data: 2 years from your last contact with us. If you sign a contract with us, data is kept for the duration of the commercial relationship and, afterwards, for the applicable legal periods.
- Analytics data: 14 months (Google Analytics 4 default).
- Session recordings: 30 days (Microsoft Clarity maximum).
5. Recipients and processors
We share data only with the following providers acting as data processors:
| Provider | Purpose | Location |
|---|---|---|
| Vercel Inc. | Site hosting | United States (EU SCCs) |
| Google Ireland Ltd. (Google Analytics) | Analytics | EU / United States (DPF Framework) |
| Microsoft Ireland Operations Ltd. (Clarity) | Experience analysis | United States (DPF Framework) |
| Umami Software, Inc. (Umami Cloud) | Privacy-first analytics | European Union |
| Cloudflare, Inc. | DNS and security | United States (EU SCCs) |
International transfers are made with appropriate safeguards: Standard Contractual Clauses approved by the European Commission (SCCs) or adherence to the EU-US Data Privacy Framework.
6. Your rights
You have the right to:
- Access your personal data
- Rectification of inaccurate or incomplete data
- Erasure ("right to be forgotten")
- Restriction of processing
- Data portability
- Object to processing
- Withdraw consent at any time, without affecting the lawfulness of prior processing
You can exercise these rights by emailing info@controla.cloud with a copy of your ID or equivalent identification document.
If you believe your rights have not been properly addressed, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) at aepd.es.
7. Cookies
We use cookies and similar technologies. See our Cookie Policy for details and to manage your preferences.
8. Changes to this policy
We may update this policy to reflect legal changes or changes to our services. The current version will always be available at this URL with the last update date.
The Spanish version of this policy is the legally binding version. This translation is provided for convenience.