RL3
ES

Privacy policy

Last updated: 10 October 2026

1. Data controller

2. Data we collect

We collect personal data at two points:

a) Contact form on rl3.dev

  • Name, email, free-text message.
  • Phone number (optional), if you choose to provide it.
  • Explicit acceptance of this policy via a checkbox.

b) Conversation with our WhatsApp chatbot

  • The name you give us.
  • Email, if you request a call with our team and agree to it being stored.
  • WhatsApp phone number (required for the conversation to exist; provided by Meta).
  • Text content of the conversation.
  • Service rating (poor / good / excellent) if you choose to answer.

We do not collect sensitive data.

3. Purpose of processing

To answer your request, maintain the business relationship, send communications only with additional consent, and improve quality through aggregated ratings.

4. Legal basis

  • Explicit consent (Art. 6.1.a GDPR) for storing your data.
  • Legitimate interest (Art. 6.1.f GDPR) to continue a WhatsApp conversation you started until you decide whether to consent to storage.

5. Retention

  • Active leads: for as long as the business relationship lasts.
  • Closed leads: 24 additional months.
  • Conversations without consent: automatically deleted after 1 hour.

6. Recipients

Storage on our own infrastructure (Hetzner, EU) and an operational mirror in Google Sheets, within an RL3 Google account.

Data processors: Hetzner Online GmbH (hosting, EU), Google LLC (operational mirror storage and Gemini services), Meta Platforms Ireland Ltd. (WhatsApp Business channel). We do not transfer data to third parties for commercial purposes.

7. International transfers

Google and Meta may process data outside the European Economic Area. When that happens, the transfer relies on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.

8. Artificial intelligence in the chatbot

The WhatsApp chatbot's replies are generated by an artificial intelligence model. We make no decisions with legal effects on you based solely on automated processing (Art. 22 GDPR).

If you would rather talk to a person on our team, tell the chatbot or write to admin@rl3.dev.

9. Your rights

Access, rectification, erasure, objection, restriction and portability. Write to admin@rl3.dev with the subject "RGPD". We reply within 30 calendar days at most. You can withdraw your consent at any time the same way, without affecting what was processed before. If you think we have not handled your rights properly, you may lodge a complaint with the Spanish Data Protection Agency, AEPD (www.aepd.es).

10. Security

HTTPS, access control, audit logs, and physical deletion when the right to erasure is exercised.

11. Cookies and analytics

Your browser stores your theme (light or dark) and your cookie choice. This is technical storage and needs no consent.

With your consent, we use Google Analytics 4 (Google Ireland Ltd.) to count visits and see which pages and buttons get used. Without it, Analytics never loads. We don't use this data for advertising, and GA4 doesn't store your IP address. The Analytics cookies (_ga, _ga_*) last up to 2 years.

You can withdraw consent at any time from "Cookie preferences" at the bottom of every page. When you do, we delete those cookies.

12. Changes to this policy

We may update this policy. The last-updated date reflects the version in force.