Privacy policy

Summary

This site uses no cookies, no analytics and no advertising. We only process your email if you ask for a demo, and only to reply to you. We never sell or share your data.

1. Data controller

Controller

TATAMI

Data protection contact

[email protected]

The controller’s full identification details (legal name, tax ID and registered address) will be published here once company registration is complete. You can already exercise your rights by writing to the address above.

2. What data we process

“Book a demo” form: your email address, the language of the page you wrote from and the date of the request.

Technical connection data: to deliver the page and protect it from abuse, our network provider (Cloudflare) processes your IP address and technical browser data. Our own server does not keep access logs with IP addresses.

We do not collect browsing data for analytics or profiling, and we do not use cookies (see the cookie policy).

3. Purposes, legal basis and retention

Demo requests

To reply and show you TATAMI. Legal basis: steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)). Retention: up to 3 years from our last contact, or for the duration of the relationship if you become a customer.

Site security

To deliver the website and protect it from attacks and abuse. Legal basis: legitimate interest (GDPR Art. 6(1)(f)). Retention: as long as Cloudflare keeps its technical logs.

We make no automated decisions and build no profiles from your data.

4. Recipients

We never sell or share your data with third parties for commercial purposes. Only the providers we need in order to operate can access it, as data processors:

• Cloudflare, Inc.: content delivery and protection for the website.
• The hosting provider of the server that runs the site.
• The email provider whose mailbox receives the requests.

We may also disclose data where required by law or by a competent authority.

5. International transfers

Cloudflare, Inc. is based in the United States and certified under the EU-U.S. Data Privacy Framework. If any other provider processes data outside the European Economic Area, it does so with appropriate safeguards: a European Commission adequacy decision or standard contractual clauses.

6. Your rights

You can exercise the following rights at any time by writing to [email protected]:

• Access: find out what data we hold about you.
• Rectification: correct inaccurate data.
• Erasure: ask us to delete your data.
• Objection: object to a processing activity.
• Restriction: ask us to restrict processing.
• Portability: receive your data in a structured format.

We will reply within one month. If you believe we have mishandled your data, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security

• HTTPS encryption on every connection.
• Strict security headers: the site only runs its own code.
• No trackers or third-party scripts.
• Demo requests are not stored in any database: they are sent by email, over an encrypted connection, to our mailbox.

8. Changes to this policy

If we change how we process your data, we will update this page and its date. If the change is significant, we will say so visibly on the site.