Legal
Privacy policy
Last updated: October 8, 2026
At HoopyTech we take the protection of personal data seriously. This policy explains who we are, what data we process, for what purpose and on what legal basis, who we share it with, and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).
1. Data controller
- Company name: Hoopytech AI & Big Data Boutique, S.L. ("HoopyTech").
- NIF (Spanish tax ID): B21802327
- Address: Calle Peñíscola 15A, bajo, local 4 — 12003 Castellón (Spain).
- Phone: +34 964 964 888
- Email: hola@hoopytech.com
You can contact HoopyTech on data protection matters by writing to hola@hoopytech.com.
2. Data we process and for what purpose
2.1 Contact form
- Data: name, email, company (optional), reason for the inquiry and the content of the message. Together with the inquiry, we record the date, the version of this policy you accepted, the page and the link from which you reached the form and, if you arrived via a campaign, its source parameters (UTM tags or ad click identifier).
- Purpose: to handle your inquiry and, where applicable, to prepare a proposal. Submitting the form does not subscribe you to commercial communications.
- How it is processed: the inquiry is stored on this site's server and logged in Hoopytech's internal CRM, from which the team handles it and follows up.
- Legal basis: consent of the data subject (Art. 6.1.a GDPR) and the application of pre-contractual measures (Art. 6.1.b GDPR).
- Retention: for the duration of the relationship and, after it ends, for the applicable statutory periods (a minimum of 4 years for tax obligations where applicable). If no relationship is established, the data will be deleted within a maximum of 24 months.
2.2 Web analytics
- Data: aggregated browsing data (pages visited, time spent, referrer, device type and approximate country). We use Umami, an analytics solution self-hosted by HoopyTech that does not use persistent tracking cookies and does not personally identify users.
- Purpose: to measure site usage and improve the experience.
- Legal basis: consent of the data subject (Art. 6.1.a GDPR). You can decline or withdraw your consent from the banner or the Cookie policy.
2.3 Session recording (optional)
- Data: anonymized playback of interactions with the Site (mouse movements, clicks, scrolling). No form fields or information entered by the user are recorded, and it is not activated on the contact page.
- Purpose: to analyze usability issues and improve the Site.
- Legal basis: consent of the data subject (Art. 6.1.a GDPR).
3. Recipients and data processors
We do not transfer your data to third parties except where legally required. We may use service providers (data processors) who act on behalf of HoopyTech under the appropriate contractual safeguards pursuant to Article 28 GDPR. The main ones are:
- Email provider: Google (Gmail) for email communications.
- CRM: Hoopytech's internal sales management tool, where inquiries are logged for follow-up.
- LinkedIn: only if you reach the Site from a LinkedIn ad, we share with LinkedIn the click identifier that LinkedIn added to the ad link, in order to measure the campaign's conversion. We do not send your name, email or message.
- Infrastructure and hosting: HoopyTech's own servers (analytics.hoopytech.com) and the Site's hosting provider.
No international data transfers take place outside the European Economic Area, except, where applicable, to providers covered by appropriate safeguard mechanisms (adequacy decisions or standard contractual clauses).
4. Data subject rights
You may exercise at any time the rights recognized under the applicable regulations: access, rectification, erasure ("right to be forgotten"), objection, restriction of processing, portability, and the right not to be subject to automated individual decisions.
To exercise these rights, send a request to hola@hoopytech.com along with a copy of an identity document. We will respond within a maximum period of one month.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), especially if you consider that your rights have not been properly addressed.
5. Security
HoopyTech applies appropriate technical and organizational measures to ensure a level of security appropriate to the risk of the processing, including encryption in transit (TLS), access control, and the separation of environments.
6. Minors
The Site is not directed at minors under 14 years of age. We do not knowingly collect data from minors of that age.
7. Changes to this policy
We may update this policy to reflect legal or service changes. The current version will always be available at www.hoopytech.com/privacy with its last-updated date.