~ / privacy

Privacy policy

Last updated: 17 October 2026.

This policy explains what personal data Blockloop processes, why we use it and what rights you have. It covers this website (blockloop.tech) and our relationships with clients and suppliers.

The Spanish version of this policy is the legally binding one; this English text is a translation.

Who is responsible

  • Controller: BLOCKLOOP SL
  • Tax ID (NIF): B09734849
  • Registered office:
  • Registration:
  • Contact:

What data we process and why

Contact form and emails

  • Data: your name, email and the content of your message.
  • Purpose: to reply and, if you ask us to, prepare a proposal.
  • Legal basis: steps taken at your request before entering into a contract (Art. 6.1.b GDPR).
  • Retention: for as long as the conversation lasts and up to two years after the last contact, unless you ask us to delete it sooner.
  • Is it required? No, but without your name, email and message we cannot reply.

Clients and suppliers

  • Data: name, contact details, tax details (tax ID, address) and bank details.
  • Purpose: to provide or receive the agreed service, invoice and meet our accounting and tax obligations.
  • Legal basis: performance of a contract (Art. 6.1.b GDPR) and compliance with legal obligations (Art. 6.1.c GDPR).
  • Retention: for the duration of the relationship and six years afterwards (Art. 30 of the Spanish Commercial Code), or longer where tax law requires it.

Browsing the website

  • Data: the IP address you visit the website from.
  • Purpose: to serve the website and protect it from abuse. Our hosting provider handles this.
  • Legal basis: legitimate interest in keeping the website available and secure (Art. 6.1.f GDPR).
  • Retention: a few months, according to our hosting provider’s policy.

Cookies

This website uses no cookies and no tracking or advertising tools. Fonts are served from our own server, with no third-party requests.

Who we share your data with

We never sell your data or share it for marketing. Only these providers access it, processing it on our behalf:

  • Formspree, Inc. (United States): receives contact form messages and forwards them to us by email.
  • Google LLC (Firebase Hosting, United States): hosts the website.
  • Proton AG (Proton Mail, Switzerland): where we receive and store emails.

For clients and suppliers, we also share the necessary data with the Spanish Tax Agency and banks when the law or a payment requires it.

International transfers

Some of these providers are based outside the European Union. Switzerland (Proton) is covered by a European Commission adequacy decision. Google LLC is certified under the EU-U.S. Data Privacy Framework. Transfers to Formspree rely on the Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR).

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time. Write to us at . We may ask you to verify your identity.

If you believe we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (https://www.aepd.es, ).

Changes to this policy

If we change this policy, we will publish the new version here with its update date.