Privacy Policy
Last updated: June 15, 2026
Introduction
Metamorph (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website metamorph.es (the “Site”) or engage our services.
This policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable Spanish data protection laws.
Last Updated: June 15, 2026
1. Information We Collect
1.1 Information You Provide to Us
We collect personal data that you voluntarily provide when you:
- Submit a contact form or inquiry
- Subscribe to our newsletter or insights
- Request a consultation or quotation
- Create an account (if applicable)
- Communicate with us via email or phone
This information may include:
- Contact information: Name, email address, phone number, company name, job title
- Business information: Company size, industry, project details, areas of interest
- Communication data: Your messages, inquiries, preferences
- Marketing preferences: Consent to receive communications
1.2 Information Automatically Collected
When you visit our Site, we automatically collect:
- Technical data: IP address, browser type and version, operating system, device type
- Usage data: Pages visited, time spent on pages, links clicked, referral source
- Location data: General geographic location based on IP address
- Cookie data: Information collected through cookies and similar technologies (see our Cookie Policy)
1.3 Information from Third Parties
We may receive information about you from:
- Business partners and associates who refer you to us
- Publicly available sources (e.g., company websites, LinkedIn)
- Analytics providers (e.g., Google Analytics)
2. How We Use Your Information
We use your personal data for the following purposes:
2.1 Service Delivery
- To respond to your inquiries and provide requested information
- To deliver our consulting and engineering services
- To manage client relationships and projects
- To communicate about projects, deliverables, and invoicing
Legal basis: Contract performance, legitimate interests
2.2 Marketing and Communications
- To send you newsletters, insights, and updates (with your consent)
- To inform you about our services, events, or webinars
- To conduct market research and improve our offerings
Legal basis: Consent, legitimate interests
2.3 Website Improvement
- To analyze Site usage and improve user experience
- To diagnose technical issues and maintain security
- To personalize content and recommendations
Legal basis: Legitimate interests
2.4 Legal and Compliance
- To comply with legal obligations and regulatory requirements
- To protect our rights, property, and safety
- To prevent fraud and abuse
Legal basis: Legal obligation, legitimate interests
3. Legal Basis for Processing (GDPR)
Under GDPR, we process your personal data based on:
- Consent: You have given explicit permission (e.g., newsletter subscription)
- Contract: Processing is necessary to fulfill a contract with you
- Legal obligation: We must comply with applicable laws
- Legitimate interests: Processing is necessary for our business operations, provided it does not override your rights
4. Data Sharing and Disclosure
We do not sell your personal data to third parties.
We may share your information with:
4.1 Service Providers
- Hosting provider: Hostinger (for website hosting)
- Email service providers: For sending communications
- Analytics providers: Google Analytics (anonymized data)
- CRM and project management tools: For client relationship management
All service providers are contractually obligated to protect your data and use it only for specified purposes.
4.2 Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity.
4.3 Legal Requirements
We may disclose your information if required by law, court order, or governmental authority, or to protect our legal rights.
5. International Data Transfers
We are based in Spain (European Economic Area). If we transfer your data outside the EEA, we ensure adequate protection through:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions for countries deemed to provide adequate protection
- Your explicit consent for specific transfers
6. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy:
- Client data: For the duration of the engagement plus 6 years (for legal and tax purposes)
- Inquiry data: 2 years from last contact (unless you become a client)
- Marketing data: Until you withdraw consent or request deletion
- Website analytics: 26 months (Google Analytics default)
After the retention period, we securely delete or anonymize your data.
7. Your Rights Under GDPR
You have the following rights regarding your personal data:
7.1 Right of Access
Request confirmation of what personal data we hold and obtain a copy.
7.2 Right to Rectification
Request correction of inaccurate or incomplete data.
7.3 Right to Erasure (“Right to be Forgotten”)
Request deletion of your data under certain conditions.
7.4 Right to Restriction of Processing
Request that we limit how we use your data.
7.5 Right to Data Portability
Receive your data in a structured, machine-readable format.
7.6 Right to Object
Object to processing based on legitimate interests or for marketing purposes.
7.7 Right to Withdraw Consent
Withdraw consent for consent-based processing at any time.
7.8 Right to Lodge a Complaint
File a complaint with the Spanish Data Protection Agency (AEPD) or your local supervisory authority.
To exercise your rights, contact us at: contact@metamorph.es
We will respond within 30 days of receiving your request.
8. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience on our Site. For detailed information, please see our Cookie Policy.
You can manage cookie preferences through our cookie consent banner or your browser settings.
9. Security Measures
We implement appropriate technical and organizational measures to protect your personal data:
- Encryption: SSL/TLS encryption for data in transit
- Access controls: Restricted access to personal data
- Regular security audits: Vulnerability assessments and monitoring
- Secure hosting: Data hosted on secure servers with firewalls and intrusion detection
- Employee training: Staff trained on data protection obligations
While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
10. Third-Party Links
Our Site may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies.
11. Children’s Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.
12. Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The “Last Updated” date at the top indicates the most recent revision.
We will notify you of significant changes by:
- Posting a notice on our Site
- Sending an email to registered users (if applicable)
Your continued use of the Site after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:
Metamorph
Email: contact@metamorph.es
Address: [Company address — to be provided]
Phone: [Phone number — to be provided]
Data Protection Officer (if applicable):
Email: privacy@metamorph.es (or contact@metamorph.es)
14. Supervisory Authority
You have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD):
AEPD
C/ Jorge Juan, 6
28001 Madrid, Spain
Website: https://www.aepd.es
Phone: +34 901 100 099
This privacy policy is effective as of June 15, 2026 and applies to all personal data collected by Metamorph.