Skip to content

Privacy policy

Last updated: 17/10/2026

1. Who processes your data

  • Controller: APLICACIONES SAAS IBERICA, S.L. (Tax ID B93773620)
  • Address: Avenida Cañada de los Fenicios, Aldea 5, Casa 24, 18150 Gójar (Granada), España
  • Contact: hola@cloudesk.es

2. Two different roles, depending on whose data it is

This matters for understanding the rest of the policy:

  • We are the controller of the data of those who visit this website, write to us for information or subscribe to one of our applications.
  • We are a processor for the data our customers manage inside those applications (their own clients, guests, members or contacts, depending on the product). In that case the customer is the controller: we only process that data following their instructions and in order to provide them with the service. If your data is in one of our applications because you gave it to a company that uses it, you should contact that company to exercise your rights; if you write to us, we will redirect you to them.

3. What data we process and why

a) Contact form and email

If you write to us from the form on this website or directly by email, we process your name, your company's name, your email address, your phone number, the type of project, the approximate number of people who would use it if you tell us, and the content of your message. We use them solely to handle and answer your request and, if you ask us to, to prepare a quote. The form message is not stored in any database: it is sent to us by email.

  • Legal basis: pre-contractual measures taken at your request (art. 6.1.b GDPR). You are the one starting the contact to ask us for information, so we do not need your consent and do not ask for it: the checkbox on the form confirms you have read this information, it does not legitimise the processing.
  • Retention: for as long as the conversation lasts and, afterwards, one further year in case it needs to be picked up again or a claim arises. You can ask us to delete it sooner.

b) Customer account

This does not happen on this website. There is no sign-up, basket or payment on cloudesk.es: it is a showcase. Each application is subscribed to on its own site, with its own terms and its own privacy policy. We explain it here because we are the same company and we want you to know what we do with the data if you do become a customer.

If you subscribe to one of our applications, we process your account and company data: name, email, password (stored hashed, never in the clear), tax and billing details, and the account activity log.

  • Legal basis: performance of the service contract, and compliance with legal tax and accounting obligations.
  • Retention: for the duration of the relationship and, afterwards, for the applicable statutory limitation periods (generally six years for commercial records and four for tax obligations).

c) Data processed on behalf of our customers (as a processor)

Within each application we process the data our customer needs for their activity and which they themselves enter or collect. Exactly what that data is and what it is used for is defined by each customer in their own privacy policy and in the data processing agreement they sign with us.

  • Legal basis (the customer's): whichever applies to their activity, usually performance of their contract with the data subject or compliance with a legal obligation.
  • Retention: as set by the applicable rules and the customer's instructions. When the service ends, we return or delete the data as they instruct.

d) Browsing

Analytics, only if you accept it. If you accept analytics cookies in the cookie notice, we use Google Analytics (Google Ireland Ltd.) to count visits and see which pages are read, in aggregate figures. Google receives the random identifier in its cookie, the pages you visit, the time, your device and browser type and an approximate location (country or city); Google Analytics does not store your IP address. We do not use it for advertising: Google signals and ad personalisation are switched off. If you do not accept it, nothing from Google is loaded. Legal basis: your consent (art. 6.1.a GDPR), which you can withdraw at any time from «Cookie settings». Retention: user and event data are deleted from Google Analytics after 2 months.

Beyond that, there are no pixels, no advertising and no profiling cookies, and the site loads no fonts, maps or videos from external servers: everything else is served from cloudesk.es. Each cookie is explained in the cookie policy.

The server also keeps the usual access logs (IP address, date and time, page requested, browser) for security and troubleshooting.

  • Legal basis: our legitimate interest in keeping the site secure and running (art. 6.1.f GDPR).
  • Retention: access logs, 30 days. Error and security logs, up to 12 months. They are deleted after that.

e) Cookies

If you accept or reject cookies from the notice, we store what you chose, when, and against which version of the policy, together with your browser and a fingerprint of your IP (never the IP in the clear). It is the proof that we honour your decision.

  • Legal basis: compliance with a legal obligation, namely being able to demonstrate consent (arts. 5.2 and 7.1 GDPR).
  • Retention: 24 months from the moment you decide, which is how long the consent itself lasts.

4. Who it is shared with

We do not sell personal data nor pass it to third parties for their own commercial use. It is only accessed by the providers we need in order to deliver the service, each under its own processing agreement:

  • Server hosting and email: Dinaserver, with servers in Spain.
  • Visit measurement, only if you accept it: Google Ireland Ltd. (Google Analytics), as data processor.
  • Public authorities and courts: where there is a legal obligation to disclose the data to them.

And that is all: there is nothing else. The only possible international transfer is Google Analytics, and only if you accept analytics cookies: Google may process that data in the United States, where Google LLC is certified under the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023). Without your consent, no data leaves the European Union.

5. Your rights

You may at any time request access to your data, its rectification or erasure, the restriction of processing, portability, and object to processing. You may also withdraw your consent whenever you wish, without affecting the lawfulness of processing carried out beforehand.

To exercise them, write to us at hola@cloudesk.es stating which right you wish to exercise. We will reply within one month at the latest.

If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid).

6. Security

We apply technical and organisational measures to protect the data: HTTPS traffic encryption, passwords stored with secure key derivation functions, encryption of external service credentials, role- and permission-based access control, and activity logging of sensitive operations.

7. Changes to this policy

If we amend this policy, we will publish the new version at this same address and update the date in the header. If the change is significant and affects data we already process, we will let you know.

You can also read the legal notice and the cookie policy.