Skip to main content
Legal

Privacy policy

How we process your personal data, who we share it with and how to exercise your rights, under the GDPR and Spain's LOPD-GDD, in plain language.

Last updated: October 2026
01

Data Controller

Company
Fëanor's Code S.L.
Address
Calle Roque Chabás 29, Bajo, Puerta 266, CP 03011, Alicante, Spain
Tax ID (CIF)
B22811475
Commercial Registry
Alicante Commercial Registry, sheet 200290 (EUID ES03026.000650801)
Email
info@feanorscode.com
02

Introduction

At Fëanor's Code S.L., we are committed to protecting the privacy of our clients and website visitors. This policy describes how we process your personal data in compliance with:

  • Regulation (EU) 2016/679, General Data Protection Regulation (GDPR)
  • Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPD-GDD)
  • Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE)
03

Data We Process

We only process the data needed for each purpose:

  • Contact form
    Name, email and message. We process them to answer your request, based on your own request as a step prior to a contract (Art. 6.1.b GDPR). We keep them until we answer it; if a business relationship follows, for the duration of the contract.
  • Clients and business relationship
    Name, email, phone, company and position. We process them to provide our software development and consulting services and manage the relationship, in performance of the contract (Art. 6.1.b GDPR). We keep them for the duration of the contract plus 5 years.
  • Billing
    Tax and payment data. We process them to comply with our tax and commercial obligations (Art. 6.1.c GDPR) and keep them for 6 years (Art. 30 of the Spanish Commercial Code).
  • Server technical logs
    IP address, browser and requested pages, recorded by our hosting provider when serving the website. We process them based on our legitimate interest in keeping the website secure and available and preventing abuse of the contact form (Art. 6.1.f GDPR), for the limited period set by the hosting provider.
  • Website analytics
    Website usage data and browser identifiers, through Google Analytics 4. They are only processed if you accept analytics in the cookie banner (Art. 6.1.a GDPR), to understand in aggregate how the website is used and improve it. Retention is set by Google according to its Google Analytics 4 rules.

When a development or consulting project requires access to the client's personal data, we process it as a processor on behalf of the client (Art. 28 GDPR), under the contract signed with them.

Data processing related to the TENGWAR product, including the technical logs its clients send us for support, is described in the privacy policy at tengwar.net/en/privacy.

04

Data Recipients

We do not sell your data or use it for automated decision-making. We only share it with:

  • Netlify, Inc. (United States)
    Website hosting. Data processing agreement (Art. 28 GDPR).
  • Resend, Inc. (United States)
    Sending the messages from the contact form. Data processing agreement (Art. 28 GDPR).
  • Google Ireland Ltd. / Google LLC
    Website analytics, only with your consent. Data processing terms (Art. 28 GDPR).
  • Other technology providers
    Corporate email. Data processing agreement (Art. 28 GDPR).
  • Tax authorities, financial institutions and advisors
    When required by law or needed to manage payments or receive legal and accounting advice, under a duty of confidentiality.
05

International Transfers

Netlify, Resend and Google may process data in the United States. These transfers are covered by the EU-U.S. Data Privacy Framework, where the provider is certified, or by the Standard Contractual Clauses approved by the European Commission, in accordance with Chapter V of the GDPR.

06

Cookie Policy

By default, the website only uses technical storage. Analytics loads only if you accept it in the banner.

  • Cookie preference (first-party, technical)
    Stores your choice in the browser's local storage (localStorage) under the key cookie-consent, for up to 13 months. Does not require consent.
  • Analytics (Google Tag Manager and Google Analytics 4)
    _ga and _ga_* cookies to measure website usage in aggregate. They are only set if you accept analytics, and their duration is set by Google. Requires consent.
  • YouTube videos (Google)
    Videos on case study pages and in journal articles only load when you press play, in privacy-enhanced mode (youtube-nocookie.com). From then on, YouTube may store data in your browser.
  • Advertising
    We do not use advertising cookies or ad personalization.

Google Consent Mode v2 starts as denied and only changes after your choice. We use analytics to understand aggregate website usage, not to build advertising profiles.

You can accept, reject or manage analytics from the banner, and reopen it at any time from the "Cookie settings" link in the footer to withdraw consent as easily as you gave it. You can also delete cookies and local storage from your browser settings.

07

Your Rights

Under the GDPR and the LOPD-GDD, you can exercise the following rights:

  • AccessKnow what data we process about you
  • RectificationCorrect inaccurate or incomplete data
  • ErasureAsk us to delete your data
  • RestrictionLimit how we use your data
  • PortabilityReceive your data in a structured, commonly used format
  • ObjectionObject to certain processing
  • Withdraw consentAt any time, without affecting earlier processing

Write to info@feanorscode.com, or by post to our address marked "Data Protection", with a copy of a document proving your identity. We reply within one month, extendable by two more months in particularly complex cases.

If you believe we have not handled your rights correctly, you may file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es or with the data protection authority of your EU country.

08

Security Measures

We apply appropriate technical and organizational measures to protect your personal data, such as encryption in transit (TLS), providers bound by data processing agreements, and access controls.

09

Minors

Our services are aimed at companies and professionals. We do not knowingly collect data from children under 14 (Art. 7 LOPD-GDD). If you know that a minor has given us personal data, write to us so we can delete it.

10

Third-Party Links

Our website may contain links to third-party sites, whose privacy practices we do not control. We recommend reading their privacy policies.

11

Policy Updates

We may update this policy periodically. Significant changes will be communicated through our website. The last update date is shown at the top of this document.

12

Contact

For any questions about this policy or your personal data, please contact us:

Email
info@feanorscode.com
Address
Calle Roque Chabás 29, Bajo, Puerta 266, CP 03011, Alicante, Spain