Skip to main content
ADWZenith
Change language

Privacy Policy

This Privacy Policy describes the processing of personal data carried out through the website ADW Zenith (https://www.adwzenith.com), in accordance with Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), and applicable supplementary legislation.

1. Identity of the Data Controller

  • Controller: Jorge Acuña Rodríguez (self-employed)
  • Tax ID (NIF/CIF): Y2464624G
  • Registered address: Calle José Antonio 55, Local 4, Sevilla la Nueva, España
  • Email: contacto@adwzenith.com
  • Website: https://www.adwzenith.com

For any matter relating to the protection of personal data, you may contact us at the email address indicated above.

2. Personal data we process

Depending on your use of the Website and the platform, we may process:

  • Identification and account data: first and last name, username, login credentials (password stored in encrypted / hashed form), internal user identifiers.
  • Contact data: email address, telephone number, company or organisation (where provided).
  • Profile data: biography, avatar, notification preferences and other voluntary information in the profile.
  • Usage and technical data: IP address, device/browser identifiers, access and security logs (audit log), cookies and similar technologies (see the Cookie Policy).
  • Communication data: content of contact forms, quote requests and related correspondence.
  • Billing or contracting data (where applicable): data necessary for invoicing and commercial management, in accordance with tax and commercial regulations.

3. Purposes of processing

We process personal data for the following purposes:

  • Managing registration, authentication (including MFA where enabled) and maintenance of the user account.
  • Providing, administering and improving platform services (dashboard, profile, contracted features).
  • Sending service notifications (technical notices, security alerts, relevant changes to the account or service).
  • Handling contact, information or quote requests.
  • Ensuring platform security (fraud prevention, abuse prevention, automated attacks, anti-bot verification such as Cloudflare Turnstile).
  • Complying with applicable legal obligations (tax, consumer protection, information security where applicable).
  • With prior consent, sending commercial or marketing communications.

4. Legal basis (lawfulness)

  • Performance of a contract or application of pre-contractual measures (Art. 6(1)(b) GDPR): registration, login, provision of the service, handling of quotes linked to a request.
  • Consent (Art. 6(1)(a) GDPR): non-essential cookies, commercial communications, optional processing expressly accepted. Consent may be withdrawn at any time.
  • Legitimate interest (Art. 6(1)(f) GDPR): platform security, abuse prevention, technical improvement of the service, always balanced against the data subject's rights.
  • Compliance with a legal obligation (Art. 6(1)(c) GDPR): retention of invoices, response to requests from competent authorities, etc.

5. Data retention

Data will be retained for as long as an active contractual or user relationship exists and, thereafter, for the periods required by law or necessary for the establishment, exercise or defence of claims. As a general guide:

  • User account: for as long as the account remains active; after cancellation, blocking or anonymisation within a reasonable period, unless a legal obligation to retain data applies.
  • Contact / quote requests: for the time necessary to handle the request and, where applicable, up to 3 years from the last interaction, unless a contractual relationship begins.
  • Security and audit logs: for the time necessary to detect and investigate incidents (typically between 6 and 24 months, as proportionate).
  • Tax / commercial documentation: the periods established by tax and commercial regulations (generally up to 6 years or the applicable period).

6. Recipients and processors

We do not sell personal data. The following categories of recipients / processors may access data exclusively to provide services to the Controller and under contractual instructions (Art. 28 GDPR):

  • Infrastructure and hosting / edge: Cloudflare (including protection, CDN and, where applicable, Workers).
  • Database, authentication and storage: Supabase (or equivalent authenticated backend provider).
  • Transactional email: Resend for service notifications and account verification.
  • Anti-bot security: Cloudflare Turnstile, when active on authentication forms.
  • Public authorities and competent bodies, where there is a legal obligation.

7. International data transfers

Some of the cloud providers mentioned may process data from outside the European Economic Area (EEA) or involve international transfers. In such cases, the Controller will adopt the appropriate safeguards provided for in the GDPR, including:

  • European Commission adequacy decisions, where available.
  • Standard Contractual Clauses (SCCs) approved by the European Commission, supplemented where necessary with additional measures.
  • Other valid safeguards in accordance with Articles 46 et seq. of the GDPR.

You may request further information on transfers and applicable safeguards by writing to contacto@adwzenith.com.

8. Rights of data subjects (access, rectification, erasure, etc.)

The User may exercise the following rights:

  • Access: to know what personal data we process.
  • Rectification: to correct inaccurate or incomplete data.
  • Erasure ("right to be forgotten"): to request deletion where legally applicable.
  • Objection: to object to processing based on legitimate interest or to processing for direct marketing purposes.
  • Restriction: to request restriction of processing in the cases provided for in the GDPR.
  • Portability: to receive data in a structured, commonly used format, where processing is based on consent or contract and carried out by automated means.
  • Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.
  • Not to be subject to solely automated decisions with legal or similarly significant effects, within the meaning of Art. 22 GDPR (including profiling with such effects).

To exercise these rights, send a request to contacto@adwzenith.com, providing sufficient identification (and a copy of an identity document where necessary to verify your identity). We will respond within the legally prescribed period (generally one month, extendable under the GDPR).

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

9. Security measures

The Controller applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including, among others, access controls, encryption in transit (HTTPS/TLS), password hashing, security event logging and, where applicable, multi-factor authentication.

10. Minors

The User declares that they are at least 18 years of age or, where the law allows it, at least 14 with the consent of their legal representatives. The services are not directed at persons under 14. If you become aware that a minor has provided personal data without that consent, please contact contacto@adwzenith.com so that we may proceed with deletion.

11. Amendments

The Controller may update this Privacy Policy to reflect legislative changes or changes in processing. The current version will be the one published on this page, with the date of last update indicated.

Last updated: September 2026. Courtesy translation — Spanish version prevailsin case of conflict.