Privacy policy
COMPAS3 COMERCIO ELECTRÓNICO SL processes the personal data it receives through https://www.compas3.com/ in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). This website is informational: it has no forms, user registration, newsletter or online shop.
Data controller
| Item | Information |
|---|---|
| Company name | COMPAS3 COMERCIO ELECTRÓNICO SL |
| Tax ID (NIF) | B82655705 |
| Registered address | Calle Miguel Yuste 12, 1B, 28037 Madrid, Spain |
| contacto@compas3.com |
What data we process and why
| Processing | Purpose | Data | Legal basis | Retention |
|---|---|---|---|---|
| Handling enquiries by email | Replying to people who write to contacto@compas3.com | Name, email address and any data included in the message | Legitimate interest in handling your enquiry (Art. 6.1.f GDPR) and, if you ask for information about our services, pre-contractual measures at your request (Art. 6.1.b GDPR) | 12 months from the last communication. After that, the data is blocked for the legal limitation periods |
| Server browsing data | Ensuring the operation and security of the website | IP address, date and time of the visit, requested page and browser type | Legitimate interest in the security of the website (Art. 6.1.f GDPR) | 30 days |
The data you give us is the data needed to handle your request. If you do not provide it, we will not be able to reply. We do not make automated decisions or build profiles.
Cookies
The use of cookies and similar technologies is explained in our cookie policy.
Who we share your data with
We do not share your data with third parties, except where required by law. To provide the service we rely on providers that act as data processors and process data only on our instructions:
- Website hosting provider (Railway).
- Email provider (Google Workspace).
International transfers
The website is hosted on Railway, in a data centre in the European Union (Amsterdam). However, Railway stores the technical logs of its platform, which include visitors' IP addresses, in the United States. This international transfer is covered by the European Commission's standard contractual clauses (Decision 2021/914) incorporated into Railway's data processing agreement. The emails we receive are managed with Google Workspace, which may process data outside the European Economic Area under the safeguards of its data processing agreement, also based on standard contractual clauses.
Your rights
You can exercise your rights of access, rectification, erasure, restriction of processing, objection and portability at any time. You can also withdraw any consent you have given, without affecting the lawfulness of the processing carried out before.
To exercise them, write to contacto@compas3.com or to Calle Miguel Yuste 12, 1B, 28037 Madrid, stating the right you wish to exercise and a means to identify you. If there are doubts about your identity, we will ask you for additional documentation. We will reply within one month, which may be extended by two further months where the complexity or number of requests justifies it.
If you believe that your data is not being processed in accordance with the regulations, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Security
We apply technical and organisational measures appropriate to the risk to ensure the integrity, confidentiality and availability of data, within our information security management system.
Last updated: 30 October 2026