Privacy policy

This English version is provided for information only. The Spanish version is the original and prevails in the event of any discrepancy.

Controller – who is the controller of the processing of the data?

Identity: Ticdat Consulting, S.L.
Registered office: Carrer Riera Garrap, 37, 17007 Girona (Spain)
Tax ID (CIF): B42890665
Telephone: +34 872 20 69 74
Email: hola@ticdat.com
Domain name: www.ticdat.com

Purposes – for what purposes do we process your data?

In compliance with the provisions of the General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679, we inform you that we will process the data you provide to us in order to:

Manage your contracting of services with us, including through the ecomverify platform, owned by Verify Solutions, S.L. (hereinafter, “the Platform”), as well as the corresponding invoicing and delivery.
Deal with the enquiries and requests you send us through the forms on this website, by email, by telephone or via WhatsApp, and answer the questions you ask in the website chat (see the following sections).
Process the free account you request on this website (see “Free account”).
If you are already a client, send you communications about services of ours similar to those you have contracted, unless you object.
Compile statistics on the use of the website, only if you accept the measurement cookies (see “Blog images and website measurement”).
Comply with legally established obligations, as well as verify compliance with contractual obligations, including fraud prevention.
Disclose data to bodies and authorities, provided that the data are required in accordance with legal and regulatory provisions.

WhatsApp support – a person at the firm replies to you

The messages you send us on WhatsApp at +34 872 20 69 74 or at any of our WhatsApp numbers are read and answered by a person at the firm. When your message is received, the system may send you an automatic acknowledgement of receipt (with our opening hours if we are closed); the reply is then given to you by a person. No automated assistant replies on WhatsApp.

What we process: your telephone number, the profile name you have set in WhatsApp, the content of the messages, the files you send us (photos, documents, audio…), which we store on our servers, and the delivery and read receipts for the messages we send you. The purpose is to deal with your enquiry.
On what legal basis: the taking of steps at your request prior to entering into a contract, since it is you who starts the conversation, or, if you are already a client, the performance of your contract (Article 6(1)(b) of Regulation 2016/679).
Who else is involved: WhatsApp messages travel over the WhatsApp Business platform (Cloud API) of Meta Platforms Ireland Limited, which provides the messaging service and applies its own privacy policy. Meta may process those data outside the European Economic Area (see “Recipients”).
How long we keep it: we store the conversation —your messages, their files and our replies— so that we can deal with your enquiry. It is kept for as long as your enquiry is being dealt with and, afterwards, for the legally required periods, like any other communication with clients. The conversations of people who do not go on to become clients are erased when they are no longer necessary.
If you are already a client: when your telephone number is recorded in your client record, the message is linked to it, so that the person dealing with you sees it alongside the rest of your file and replies to you from there.

We recommend that you do not send documents or special category data via WhatsApp. To send documents, please use the Platform or email.

Website chat (“Quick question”) – an automated assistant replies to you

The chat on this website is handled by MAi, our own automated assistant: no one is reading the conversation. It provides general information and, when the answer depends on your specific case, it refers you to the firm.

What we process: the question you type, solely to generate the answer. We do not store the content of the conversation. Only when the search finds nothing to answer with does the technical log of the service that carries it out record the beginning of the question (up to 60 characters). To limit the number of enquiries per hour, we store a counter associated with a fingerprint (hash) of your IP address, not the address itself in plain text, which is deleted from the two-hour mark onwards.
On what legal basis: for answering, the taking of steps at your request prior to entering into a contract (Article 6(1)(b) of Regulation 2016/679); for the counter, our legitimate interest in preventing abusive use of the chat (Article 6(1)(f)).
Who else is involved: no one. The assistant runs on our own servers: the content of your enquiry is not sent to any third-party artificial intelligence provider, nor is it used to train any model.
Automated decisions: the assistant does not take decisions that produce legal effects concerning you. You can ask at any time for a person to deal with your enquiry, by writing to hola@ticdat.com or calling +34 872 20 69 74.

Do not type personal data in the chat (your name, your telephone number, your tax ID (NIF)…) or special category data: they are not needed to answer you and, since the conversation is not stored, they do not reach anyone at the firm. For a person to deal with your enquiry, use the contact form, email, telephone or WhatsApp.

Website forms

With the contact form, the Kit Digital information form and the “Join Ticdat” form, we process the data you enter in them and the page of the website from which you send them:

Contact: name, email address, telephone number (if you give it), your enquiry and the language of the page, in order to reply to you.
Kit Digital: name, email address, telephone number, company or trading name, legal form, number of employees, website and comments, in order to give you information about Kit Digital.
Join Ticdat: name, email address, telephone number, city or province, qualification and comments, in order to assess your application to collaborate with the Ticdat network of advisory firms and to get in touch with you.

The website does not store these data: it sends them by email to the firm’s mailbox through the email service of STRATO GmbH, which acts as processor. The legal basis is the taking of steps at your request prior to entering into a contract (Article 6(1)(b) of Regulation 2016/679). The data that the form does not mark as optional are necessary to deal with your request: without them we cannot process it.

To limit repeated submissions, the website counts each hour’s submissions with a fingerprint (hash) of your IP address, not the address itself in plain text, and that counter is deleted from the two-hour mark onwards. The legal basis is our legitimate interest in preventing abusive use of the forms (Article 6(1)(f) of Regulation 2016/679).

Free account

If you request a free account on this website, we process your tax ID (NIF: DNI, NIE or CIF), the name of your business, your email address and the IP address from which you request it. We use them to check whether you are already a client of the firm, to limit repeated requests and to prepare your account. The data requested by the form are necessary: without them we cannot process the account.

The account is created on the Platform, belonging to Verify Solutions, S.L., owner of ecomverify: to create it, we disclose those data to it and take you to its page, where you choose your password. What happens from then on is explained in ecomverify’s privacy policy. The access we prepare stops being valid after two hours. If you are already a client, or if the account cannot be prepared at that moment, nothing is created and the firm receives those data by email in order to reply to you.

The legal basis is the taking of steps at your request prior to entering into a contract, since it is you who requests the account (Article 6(1)(b) of Regulation 2016/679); for the IP address and the limit on requests, our legitimate interest in preventing abusive use of the form (Article 6(1)(f)).

Blog images and website measurement

Blog images: they are served from media1.ecomverify.com, belonging to Verify Solutions, S.L. When you view a page with blog images, your browser requests them from that server, which receives your IP address, as with any request on the internet. The legal basis is our legitimate interest in showing you the complete website (Article 6(1)(f) of Regulation 2016/679).
Measurement (Google): only if you accept the measurement cookies does the website load Google Tag Manager and Google Analytics, from Google Ireland Limited, which collect data on your browsing of the website and on your device, including your IP address, to compile usage statistics. If you decline them, or for as long as you have not decided, nothing from Google is loaded. The legal basis is your consent (Article 6(1)(a) of Regulation 2016/679 and Article 22.2 of the LSSI, Spanish Law 34/2002 on Information Society Services and Electronic Commerce), which you can withdraw at any time from “Cookie settings”, at the bottom of every page (also by clearing this site’s data in your browser). Google may process those data outside the European Economic Area (see “Recipients”). More details in the Cookie Policy.

Categories of data – What data do we process?

As a result of the purposes mentioned above, at Ticdat Consulting, S.L. we manage the following categories of data:

Identification data
Electronic communications metadata
Commercial information data. If the user provides data of third parties, the user states that they have those third parties’ consent and undertakes to pass on to them the information contained in this clause, releasing Ticdat Consulting, S.L. from any liability in this respect.
Nevertheless, Ticdat Consulting, S.L. may carry out checks to verify this fact, adopting the appropriate due diligence measures in accordance with data protection legislation.

Legal basis – what is the legal basis for the processing of your data?

The management of the contracting, invoicing and provision of services is based on the performance of the contract (Article 6(1)(b) of Regulation 2016/679), and dealing with the enquiries and requests you send us, on the taking of steps at your request prior to entering into a contract (same Article).
Communications about our services to people who are already clients are based on our legitimate interest (Article 6(1)(f) of Regulation 2016/679 and Article 21.2 of the LSSI), and you can object to them at any time. This website does not collect newsletter subscriptions or consent to send you commercial communications.
Website usage statistics are based on your consent, and the chat and form usage limits and the blog images, on our legitimate interest, as explained in their sections.
Finally, the data may be used to comply with the legal obligations applicable to Ticdat Consulting, S.L.

Data Retention Period – How long will we keep your data?

Ticdat Consulting, S.L. will keep users’ personal data only for as long as necessary to fulfil the purposes for which they were collected, as long as the user does not withdraw the consents given. Thereafter, where necessary, it will keep the information blocked for the legally established periods.

The periods set by the website itself are these: the chat conversation is not kept (except as indicated in its section regarding the technical log) and its enquiry counter is deleted from the two-hour mark onwards, as is the forms’ submission counter; the access prepared for the free account stops being valid after two hours, but that does not erase the data of the request. WhatsApp conversations follow what is indicated in their section, and the measurement cookies, the duration indicated in the Cookie Policy.

Recipients – To which recipients will your data be disclosed?

Your data may be accessed by those providers that supply services to Ticdat Consulting, S.L., such as hosting services, marketing tools and content systems or other professionals, when such disclosure is required by the regulations or for the performance of the contracted services.

Ticdat Consulting, S.L. has entered into the corresponding data processing agreements with each of the providers that supply services to Ticdat Consulting, S.L., in order to guarantee that those providers will process your data in accordance with the legislation in force.

Your data may also be disclosed to the State Security Forces and Corps (Fuerzas y Cuerpos de Seguridad del Estado) in cases where there is a legal obligation to do so.

Banks and financial institutions, for the collection of payment for the services.
Public administrations with competence in the relevant sectors of activity, where so provided by the legislation in force.

Specifically, depending on what you use on this website:

Verify Solutions, S.L., owner of ecomverify: the data of the free account you request, in order to create it, and the IP address of anyone who views the blog images.
Meta Platforms Ireland Limited: what you write to us and what we write to you via WhatsApp.
STRATO GmbH, as processor: the emails containing the data from the forms and from the account requests, and the internal notifications the firm receives when a WhatsApp message comes in.
Google Ireland Limited, only if you accept the measurement cookies: the browsing data.

International transfers: Meta and Google may process the data outside the European Economic Area, in particular in the United States, with the safeguards provided for in Regulation 2016/679 and set out in their terms: the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework or the standard contractual clauses approved by the Commission. You can ask us for more information about these safeguards at hola@ticdat.com.

Information Security – What security measures do we implement to look after your data?

To protect the different types of data covered by this privacy policy, the necessary technical security measures will be taken to prevent their loss, manipulation, dissemination or alteration.

Encryption of communications between the user’s device and the servers of Ticdat Consulting, S.L.
Encryption of the information on the servers of Ticdat Consulting, S.L. themselves
Other measures that prevent third parties from accessing the user’s data.
In those cases where Ticdat Consulting, S.L. uses service providers for the maintenance of the platform that are located outside the European Union, these international transfers are regularised in line with the commitment of Ticdat Consulting, S.L. to the protection, integrity and security of users’ personal data.

Rights – What are your rights when you provide us with your data and how can you exercise them?

You have the right to obtain confirmation as to whether or not we at Ticdat Consulting, S.L. are processing personal data concerning you.
Likewise, you have the right to access your personal data and to request the rectification of inaccurate data or, where applicable, to request their erasure where, among other grounds, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, you may request the restriction of processing of your data, in which case we will only keep them for the exercise or defence of claims.
In certain circumstances and on grounds relating to your particular situation, you may object to the processing of your data. Ticdat Consulting, S.L. will stop processing the data, except on compelling legitimate grounds or for the exercise or defence of possible claims.

You may also exercise the right to data portability and withdraw the consents given at any time, without this affecting the lawfulness of processing based on consent before its withdrawal.

If you wish to exercise any of your rights, you can write to hola@ticdat.com.

Finally, we inform you that you may lodge any complaint arising from the processing of your personal data with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) and other competent public bodies.

Changes to the privacy policy

Ticdat Consulting, S.L. may amend this Privacy Policy at any time, with successive versions being published on the Website. In any case, Ticdat Consulting, S.L. will give prior notice of any amendments to this policy that affect users so that they can accept them.

This Privacy Policy is up to date as at 02/10/2026 Ticdat Consulting, S.L. (Spain). All rights reserved.

If you wish, you can also consult our Cookie Policy