Privacy policy

Last updated: 30/08/2026

1. Who processes your data

2. Two different roles, depending on whose data it is

This matters for understanding the rest of the policy:

• We are the controller of the data of people who visit this website, write to us to request information or a demo, or subscribe to CRM Fotovoltaica as an installation company.
• We are a processor for the data each installer manages inside the platform: their customers, their suppliers, their staff and the files of their installations. In that case the controller is the installer itself: we only process that data following their instructions and in order to provide them with the service. If you are a customer of an installer and want to exercise your rights, you should contact them; if you write to us, we will redirect you.

3. What data we process and why

a) Demo or contact form

When you fill in the form on this website we process your name, your company, your email address, your phone number and the message you write, together with technical details of the submission (date, time and IP address) used to prevent form abuse. We use them solely to handle your request, prepare your demo and get in touch with you.

To keep the form from filling up with automated submissions we use Google reCAPTCHA v3. The service analyses your interaction with the page and gives it a score telling us whether the submission looks human; to do so Google receives your IP address and data about your browser and your activity on the page, and processes that information under its privacy policy. There is no puzzle to solve and it is not used for advertising. The legal basis is our legitimate interest in protecting the form from spam and fraudulent use.

• Legal basis: your consent and pre-contractual steps taken at your request, since you initiate the contact.
• Retention: while we handle your request and, afterwards, for as long as needed to deal with any claims. You can ask us to delete your data at any time.

b) Enquiries via WhatsApp or email

If you write to us on WhatsApp at +34 617 66 54 58 or by email, we process your phone number or email address, your name if you give it to us and the content of the conversation, solely to deal with your enquiry. Messaging is provided by WhatsApp Ireland Ltd. (Meta), which processes conversation data under its own privacy policy.

• Legal basis: your consent and pre-contractual steps at your request.
• Retention: for the duration of the conversation and, afterwards, for as long as needed to deal with any claims.

c) Customer account

If you subscribe to CRM Fotovoltaica, we process your account and company data: name, email, password (stored hashed, never in plain text), tax and billing details, and the account activity log.

• Legal basis: performance of the service contract, and compliance with legal obligations in tax and accounting matters.
• Retention: for the duration of the relationship and, afterwards, for the statutory limitation periods (generally six years for commercial records and four for tax obligations).

d) Data you manage inside the platform (as processor)

On behalf of each installer we process the data they need in order to work: contact details of their customers and suppliers, billing data, addresses and references of the installations (CUPS, CAU, cadastral reference), technical and administrative documentation for each file, and data about their own staff when they use the team, time-tracking or health-and-safety modules.

• Legal basis (the installer's): performance of their contract with the customer, compliance with their legal obligations and their legitimate interest in running their business.
• Retention: as set by applicable law and the installer's instructions. When the contract ends, we return or delete the data as they instruct.

e) Browsing and measurement

If you allow it, we use Google Analytics to find out which pages are useful. You can see the details and change your decision in the cookie policy.

• Legal basis: your consent. If you do not give it, it is not activated.

4. Who we share it with

We do not sell personal data or transfer it to third parties for their own commercial use. Only the providers we need in order to deliver the service have access to it, each under a data processing agreement:

• Server hosting: Dinaserver, with servers in Spain.
• Internal sales management: requests sent from this website are recorded in our own CRM (ClouDesk), also hosted in Spain.
• Measurement: Google Ireland Limited, only if you accept measurement cookies.
• Form protection: Google Ireland Limited (reCAPTCHA), to tell people apart from automated submissions.
• Public authorities and professionals: our tax and accounting advisers, and the public bodies to which the law requires us to report information.

Apart from Google, we do not make international data transfers. Google may process data outside the European Economic Area under the standard contractual clauses approved by the European Commission.

5. Your rights

You can request at any time access to your data, its rectification or erasure, restriction of processing, portability, and you can object to processing. You can also withdraw your consent whenever you wish, without affecting the lawfulness of processing carried out beforehand.

To exercise them, write to us at hola@crmfotovoltaica.com stating which right you wish to exercise. We will reply within one month at the latest.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid).

6. Security

We apply technical and organisational measures to protect data: HTTPS traffic encryption, passwords stored using secure key-derivation functions, encryption of external service credentials, role- and permission-based access control, regular backups and activity logging for sensitive operations.

7. Changes to this policy

If we change this policy, we will publish the new version at this same address and update the date in the heading. If the change is significant and affects data we already process, we will let you know.