Privacy policy
Last updated: 18 October 2026
Who processes your data
The controller is Orbisplan S.L., Spanish tax identification number B06772255, with its registered office at Lugar Piugos de Pena, 28, 27294 Lugo (Lugo), Spain. You can contact us at info@orbisplan.com. Full identification details are provided in the legal notice.
What data we process and why
When you write to us, we process the information you provide: your name, email address, company if supplied, the content of your enquiry and any documents you choose to attach. We use this information to respond, clarify your needs and prepare a proposal when requested.
Do not include sensitive data or other people’s personal data unless necessary to assess the work. This website does not offer newsletter subscriptions or automatically send advertising.
How contact works
The form prepares a message in your email app. The fields are not sent to Orbisplan when you fill them in or prepare the message: we receive them when you send the email from that app. The website does not save a draft in its own persistent storage. Your browser or email app may manage autofill or drafts according to its settings.
Legal basis
When you request a proposal or steps before engaging our services, the necessary processing is based on taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). When responding to professional communications on behalf of a company, we may rely on our legitimate interest in maintaining that professional relationship and responding to the enquiry (Article 6(1)(f)). If an assignment is agreed, the relevant legal bases for performing the contract and complying with legal obligations will apply.
You are not required to accept advertising to have an enquiry answered. If a different use requiring consent is proposed in future, we will inform you and request consent separately.
Retention
We retain enquiries that do not lead to an engagement only for as long as necessary to respond and provide the requested follow-up, for a maximum of 12 months from the last communication. Where negotiations remain active or there is another justified need, we retain only the necessary data for as long as that purpose continues. Once no longer needed, data are deleted or kept blocked where required to address liabilities during applicable statutory periods.
This criterion includes documents attached to enquiries. Messages identified as spam are not retained as business enquiries. Client, contract and project documentation is retained separately in accordance with the contract and applicable legal obligations and liabilities.
Providers and recipients
IONOS Cloud S.L.U. provides website hosting and the contact email info@orbisplan.com through Mail Basic. It may process the necessary data as a processor under the data processing agreement entered into with Orbisplan. Data may also be disclosed where required by law. Orbisplan does not sell enquiry data.
The IONOS agreement provides for processing in the European Union or the European Economic Area and allows transfers to other countries where necessary to provide the service, subject to the safeguards required by the GDPR. The subprocessor annex identifies 1&1 Mail & Media GmbH and Open-Xchange GmbH in Germany for Mail Basic.
Hosting add-ons may involve different providers and safeguards depending on the service used. General IONOS information does not by itself identify which add-ons are active on this domain. You can ask Orbisplan for information on the recipients and transfer safeguards applicable to your data.
Technical browsing data
IONOS provides hosting. According to its documentation, it collects the referring page, requested page or file, browser type and version, operating system, device, access time and anonymised IP address. The IP address is received when the page loads and subsequently anonymised. Processing necessary to deliver the website and maintain its security and stability is based on the legitimate interest in providing a secure service (Article 6(1)(f) GDPR), limited to what is necessary for that purpose.
The public IONOS Hosting information (Spanish) states 8 weeks for visitor data. The contractual service annex refers to a maximum of 7 days for hosting log files and 28 days for email logs. These references are kept separate: they do not establish a single confirmed period for all logs or statistical reports. None replaces the enquiry retention criterion set out above.
The specific scope of this difference in retention periods for this contract has not been confirmed with IONOS. You can contact Orbisplan for further information on the processing of your data and to exercise your right to object where applicable.
Your rights
You can request access, rectification, erasure, restriction, objection and, where applicable, portability of your data. Send your request to our contact email. If we need to verify your identity, we will ask only for the information needed to do so.
Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of earlier processing. You can lodge a complaint with the Spanish Data Protection Agency (AEPD).
Automated decisions and changes
We do not use the form to make automated decisions or carry out profiling. If the operation of the website or the processing of enquiries changes, we will update this information.
Statistics and hosting services
Orbisplan is doing without its own visitor analytics tools for now. The website code does not incorporate Google Analytics, advertising tags or a measurement pixel added by Orbisplan. According to the IONOS documentation (Spanish), tracking and logging are enabled by default in Web Statistics, which uses a pixel or a log file without cookies. IONOS states a purpose of statistical evaluation and technical optimisation, with IP anonymisation after receipt. Its documentation does not specify a separate retention period for statistical reports.
Effective deactivation of that hosting service has not been confirmed. It is not described as disabled merely because reports are not consulted or analytics are not added to the code. Browser checks on the test version on 17 October 2026 did not show cookies, local or session storage, or measurement requests in the states reviewed. This does not verify all internal IONOS processes. If browser measurement requiring consent is introduced, it must remain blocked until consent is obtained; the absence of cookies does not by itself establish an exemption.