Privacy Policy
Last updated: 27 October 2026
This policy explains how we handle your data in two different situations. Choose the one that applies to you:
Want us to delete your data? Data deletion →
Data we collect through this website
1. Data controller
The controller responsible for processing your personal data is GastroLinkNexo, S.L. (hereinafter, "the Controller"), with contact address at info@gastrolinknexo.com.
- Denominación social
- GastroLinkNexo, S.L.
- CIF
- B24938540
- Domicilio social
- Lugar de Seira, 25 · 15911 Rois (A Coruña), España
- Datos registrales
- Registro Mercantil de Santiago de Compostela · hoja SC-54350
- Correo electrónico
- info@gastrolinknexo.com
- Teléfono
- +34 667 425 772
2. Data we collect
Through the contact and demo request form we process the following data: name, company, email address, phone number (optional), professional profile type, message and the origin of the request (demo or waiting list).
Through the "Share your professional profile" form (sales network) we process: full name, province, phone number, email address, professional profile, LinkedIn profile (optional), remarks (optional) and the file you send us (CV, presentation or portfolio). The file is stored in a private repository that is not publicly accessible.
In both forms we also record your acceptance of this policy, your optional consent to receive commercial communications, and the date and time of consent, as evidence thereof.
If you sign a letter of intent online, we process the details you complete in it, your digitised handwritten signature and the technical data that evidence the signature (IP address, browser, date and time), which we record in an evidence sheet. If you wish, you can also provide your company logo: we only keep it if you expressly authorise its use.
3. Purpose of processing
We process your data for the following purposes:
- To handle your request for information, a demo, or registration on the GastroLinkNexo waiting list.
- To contact you by email or phone to respond to your request.
- To send you commercial communications or news about our services, only if you give us your express consent.
- To formalise the letter of intent you sign online and, if you authorise us, to use your company logo to identify it as part of the GastroLinkNexo network on the platform, on the website and in sales materials.
- To comply with applicable legal obligations.
4. Legal basis
The legal basis for processing is your consent, given by ticking the acceptance box on the form, as well as the Controller's legitimate interest in handling the commercial enquiries received and, where applicable, the performance of pre-contractual measures requested by you.
Signing a letter of intent is based on taking pre-contractual steps at your request. Using your company logo is based on your authorisation, which you can withdraw at any time.
5. Data retention
Your data will be kept for as long as the business relationship is maintained or until you request its deletion, and for the periods legally required to address any liabilities that may arise from the processing.
As a general guide: demo requests are kept for 1 year from the last contact, and applications to the sales network (including any attached file) for 1 year from receipt, unless you request their earlier deletion or a collaboration begins.
Signed letters of intent and their evidence sheet are kept for as long as the relationship lasts and, afterwards, for six years, in line with the retention obligations for commercial records. The logo is used for as long as you keep your authorisation: if you withdraw it, we will stop using it.
6. Recipients and data processors
We do not transfer your data to third parties unless legally required to do so. To provide the service we use technology providers acting as data processors (hosting, database, sending of transactional emails), with whom we have entered into the corresponding agreements pursuant to Article 28 of the GDPR. These providers may be located within or outside the European Economic Area, in which case the appropriate safeguards required by applicable law are applied.
To protect the site and prevent abuse of the forms we use Google reCAPTCHA v3, which may collect usage data (IP address, browser information) and processes it in accordance with its own policy. You can consult Google's Privacy Policy and Terms of Service.
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, as well as withdraw your consent, by writing to info@gastrolinknexo.com. If you believe that the processing does not comply with applicable law, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
8. Information security
We apply appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including encryption of communications and access control to information.
9. Cookies
The website uses first-party and third-party cookies. You can review the details and manage your preferences in our Cookie Policy.
Changes to this policy
We may update this Privacy Policy to reflect legal or service changes. We will always publish the current version on this page, indicating the date of the last update.
Messages received through social media
This section only applies when you send us a private message on Facebook or Instagram. For the website forms, see the previous section.
Data controller
GastroLinkNexo, S.L., tax ID B24938540, registered office at Lugar de Seira, 25, 15911 Rois (A Coruña), Spain. Contact email: info@gastrolinknexo.com.
What data we process
When you send a private message to our Facebook Page or our Instagram account, we process your profile name or username, the identifier assigned to you by the platform in relation to our Page, the content of your messages and of any files you send, and the date and time of each message. We do not collect any other data from your profile. If you voluntarily include other details in your message, such as a phone number or email address, we will also process them in order to reply to you.
Why we process it
Solely and exclusively to respond to your enquiry and, where applicable, to carry out any commercial follow-up that you request or that arises from it, such as sending you information about our services, arranging a demo or assessing a possible partnership. We record these messages in our internal contact management tool and classify them so that we can organise our responses better and more efficiently. This classification belongs strictly to our internal organisation and operations and does not result in automated decisions that produce legal effects on you or commit you in any way.
Legal basis
The processing, at your request and with your express agreement, of data linked to the preparation and implementation of pre-contractual measures, and of other identification and contact data related to our legitimate interest in responding to people who contact us expressing an interest in the commercial development of our business model, for the sole purpose of managing any business relationship that may eventually arise from your enquiry.
How long we keep it
In accordance with the criteria and recommendations of the Spanish Data Protection Agency, stored data will be kept for a maximum of two years from the last contact with a commercial interest and/or from when consent was obtained for the processing of the specific data collected, unless a contractual relationship begins, in which case the mutual interest is deemed to continue until that relationship expires. Once this period has elapsed, the data will be automatically blocked and will not be accessible for the company's ordinary operations. From that date and until the third year after it was obtained, it may only be used so that GastroLinkNexo can demonstrate to the Spanish Data Protection Agency that it has complied with its personal data protection obligations.
Who we share it with
We do not share your data with third parties or use it for advertising. Only the providers that supply us with technology services (data hosting and technical support) may access it, as data processors, solely to carry out the service entrusted to them, maintaining due confidentiality and observing all other safeguards required by applicable law.
International transfers
The messaging service is provided by Meta Platforms, which may process data outside the European Economic Area. Meta participates in the EU-U.S. Data Privacy Framework. Our contact management tool is hosted on Supabase servers located in the European Union (Frankfurt, Germany). Its provider, Supabase Pte. Ltd. (Singapore), and Supabase, Inc. (United States) may occasionally process data outside the European Economic Area, for example to provide technical support, under the Standard Contractual Clauses approved by the European Commission, incorporated into its data processing agreement.
Relationship with the platforms
Facebook and Instagram are services of Meta Platforms Ireland Ltd., which processes its users' data as an independent controller, that is, under its own privacy policy. With regard to the statistics of our Facebook Page (Page Insights), GastroLinkNexo and Meta Platforms Ireland Ltd. are joint controllers under the Page Insights Controller Addendum (www.facebook.com/legal/terms/page_controller_addendum), under which Meta takes primary responsibility for that processing and for handling data subjects' requests to exercise their rights. For this reason, we recommend that you do not send particularly sensitive information through these channels, as we cannot be held responsible for its possible storage on the servers and/or files of third-party companies based outside Spain.
Your rights
In accordance with Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD) and other applicable regulations, you may exercise your rights of access, rectification, erasure, objection, restriction of processing, portability and not to be subject to individual automated decisions (including profiling) by writing to info@gastrolinknexo.com, which will be answered affirmatively within a maximum of one month from receipt. If you believe that GastroLinkNexo has not properly handled your request, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Data deletion
You may ask us at any time to delete the data we hold about you, including any messages you have sent us through Facebook or Instagram.
How to request it. Send an email to info@gastrolinknexo.com with the subject "Data deletion" and include:
You can also make the request by sending a private message or chat to our Facebook Page or Instagram account.
Request deletion by email
What we will do. We will delete your data from our contact management tool within one month of receiving your request and confirm the deletion through the same channel you used. If we need to keep any data to comply with a legal obligation, it will remain blocked only for the period required by the applicable data protection regulations, and we will tell you so in our reply.
Data held by Meta. Deleting the conversation in your Facebook or Instagram app does not delete the copy recorded in our tool; to do so, please follow the procedure above. Likewise, our deletion does not affect the data Meta keeps on its platform, which is governed by its own privacy policy.