1. Data Controller
- Identity: Lucas Linardo Zamora (ZABU Operations)
- Tax ID: ESZ3386950K
- Address: A Coruña, Spain
- Contact email: legal@zabu.es
- Phone: +34 614 49 58 67
1bis. Data Protection Officer
ZABU Operations is not required to appoint a Data Protection Officer (DPO) under article 37 of the GDPR, as it does not carry out large-scale processing of sensitive data or systematic monitoring. However, for any matter related to data protection you can contact us at legal@zabu.es.
2. Personal Data We Process
At ZABU Operations we process the personal data you voluntarily provide through:
- Contact form: Name, email and message.
- Quote request: Name, email, company and project description.
- Navigation: Technical data (IP, browser, device) via cookies.
3. Purpose of Processing
Personal data is processed for the following purposes:
- Respond to queries and requests received.
- Manage the commercial relationship and service delivery.
- Send commercial communications (only with prior consent).
- Improve our services and user experience.
- Comply with legal obligations.
4. Legal Basis for Processing
The legal basis for processing your data is:
- Consent: When submitting a form or accepting cookies.
- Contract performance: For the delivery of contracted services.
- Legitimate interest: To improve our services and communications.
- Legal obligation: Compliance with applicable regulations.
5. Data Retention
Personal data will be kept for the time necessary to fulfill the purpose for which it was collected and to determine any liabilities that may arise:
- Contact data: Up to 2 years from the last communication.
- Client data: During the contractual relationship and 5 additional years.
- Billing data: 6 years (legal obligation).
6. Data Recipients and International Transfers
We do not share your personal data with third parties, except:
- Legal obligation (public administrations, judges, courts).
- Necessary service providers (hosting, email) with data processing agreements.
International transfers: We use Google Analytics for browsing analysis, which may involve transferring data to Google servers located outside the European Economic Area (United States). This transfer is carried out under the appropriate safeguards provided in the GDPR, including the standard contractual clauses approved by the European Commission and the EU-U.S. Data Privacy Framework. These cookies are installed only with your prior consent.
7. User Rights
You can exercise the following rights at any time:
- Access: Know what data we hold about you.
- Rectification: Correct inaccurate or incomplete data.
- Erasure: Request the deletion of your data.
- Objection: Object to the processing of your data.
- Restriction: Request the restriction of processing.
- Portability: Receive your data in a structured format.
To exercise these rights, contact us at legal@zabu.es, indicating the right you wish to exercise and attaching a copy of your ID.
If you believe we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security Measures
We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction or damage:
- SSL/TLS encryption on all communications.
- Restricted access to personal data.
- Periodic backup copies.
- Secure servers located in the EU.
9. Modifications
ZABU Operations reserves the right to modify this Privacy Policy to adapt it to legislative or case-law changes. Changes will be published on this page.
Last updated: March 2026