Privacy policy

Edgar Medina Flores, trading as Risk Armour, Spanish tax identification (NIF/NIE) Y3684010E, C/ Río Guadalmena 1, Bajo A, 45007 Toledo, Toledo, Spain. Privacy contact: info@riskarmour.net. Telephone: +34 684 013 731.

We process information you provide when contacting us: name, company, email, telephone, service of interest and message. Name, email, service, message and the privacy checkbox are required for the contact form; company and telephone are optional. Technical access and security logs may include IP addresses. The form does not request health data, identity documents or other special categories of personal data.

Enquiries: responding to your form or email, based on consent (GDPR Article 6(1)(a)) and, where you request a quotation or information with a view to contracting, pre-contractual steps at your request (Article 6(1)(b)).
Contracted services: managing the contractual relationship (Article 6(1)(b)) and meeting applicable accounting, tax and legal obligations (Article 6(1)(c)).
Security: preventing abuse and maintaining availability, based on our legitimate interest in protecting the service (Article 6(1)(f)), using proportionate measures. The form does not subscribe you to marketing communications.

Enquiries are kept for as long as needed to respond and provide the follow-up you request. In general, where no contract follows and there is no justified need to retain them, they will be reviewed for deletion within 12 months of the last communication. Contractual and tax documentation is retained for legally required periods, including applicable limitation periods. Technical logs are limited to what is necessary for security and operation.

Hosting, IT maintenance and email providers may access data on the controller’s behalf under the relevant contractual arrangements. Data may be disclosed to authorities where required by law. Personal data is not sold. Corporate email is handled through the controller’s contracted hosting and email service providers, under their applicable terms and safeguards. Services involving workers’ or other third parties’ documentation require an agreed scope and, where applicable, a data processing agreement.

If a provider transfers data outside the European Economic Area, this must rely on a valid GDPR Chapter V mechanism, such as an applicable adequacy decision or appropriate safeguards, including standard contractual clauses and supplementary measures where required. You may request information about the providers and safeguards applicable to your enquiry by contacting the privacy email address.

Where applicable, you may request access, rectification, erasure, objection, restriction of processing and data portability. You may withdraw consent at any time without affecting the lawfulness of earlier processing. Email info@riskarmour.net stating your request. Additional information to verify identity will only be requested where necessary. You may also complain to the Spanish Data Protection Agency (AEPD).

We do not use contact form data for profiling or solely automated decisions producing legal effects. Technical and organisational measures are used to protect information. Please do not submit sensitive or unnecessary third-party data.

See the cookie policy for information about technologies used. This policy will be updated if processing practices or applicable requirements change. The review date appears at the beginning.