Legal

Privacy Policy

How Seobeni collects, uses and protects your personal data.

Last updated: June 2026 · Governing law: Spain (GDPR / LOPDGDD)

1. Data Controller

The data controller responsible for your personal data is:

2. Data We Collect

We only collect the personal data that is strictly necessary for the service. Depending on how you interact with this website, this may include:

2.1 Data you provide directly

  • Contact form: name, email address, company name (optional), message content.
  • Appointment scheduling: name, email, date/time preference via Google Calendar integration.
  • Email correspondence: any data you include in emails sent to us.

2.2 Data collected automatically

  • Analytics: anonymised browsing data (pages visited, time on site, referral source) via Google Analytics 4 with IP anonymisation enabled.
  • Cookies: see our Cookies Policy for full details.
  • Server logs: IP address, browser type, operating system, date and time of access (retained for security purposes for a maximum of 30 days).

3. Purposes & Legal Basis

We do not sell your data. We do not share it with third parties for their own marketing purposes.
  • Responding to enquiries — Legal basis: pre-contractual measures / legitimate interest (Art. 6.1.b and 6.1.f GDPR).
  • Providing SEO services — Legal basis: performance of a contract (Art. 6.1.b GDPR).
  • Website analytics — Legal basis: consent via cookie banner (Art. 6.1.a GDPR).
  • Legal obligations — Legal basis: compliance with legal obligation (Art. 6.1.c GDPR).
  • Sending service-related communications — Legal basis: legitimate interest (Art. 6.1.f GDPR); you may opt out at any time.

4. Retention

We keep your data only for as long as necessary:

  • Contact enquiries: 2 years from last contact, unless a service relationship is initiated.
  • Client data: duration of the service + 5 years (statutory limitation period under Spanish law).
  • Analytics data: 14 months (Google Analytics 4 default, with our configuration).
  • Server logs: 30 days maximum.

5. Recipients

Your data may be accessed by the following categories of recipients, strictly as data processors acting on our instructions:

  • Google LLC — Google Analytics 4 (anonymised analytics), Google Calendar (appointment scheduling), Google Workspace (email).
  • Web hosting provider — for server infrastructure and CDN.
  • Professional advisors — accountants or lawyers, only where legally required.

All processors have signed Data Processing Agreements (DPAs) and are bound to use your data only on our documented instructions.

6. International Transfers

Google LLC is based in the United States. Transfers are covered by Google's participation in the EU–US Data Privacy Framework and Standard Contractual Clauses (SCCs) approved by the European Commission. You can review Google's data transfer safeguards at privacy.google.com.

7. Your Rights

Under the GDPR and Spain's LOPDGDD, you have the following rights regarding your personal data:

  • Access — request a copy of the data we hold about you.
  • Rectification — correct inaccurate or incomplete data.
  • Erasure ("right to be forgotten") — request deletion of your data where no legal basis remains for processing.
  • Restriction — ask us to pause processing in certain circumstances.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing based on legitimate interest.
  • Withdrawal of consent — withdraw any consent given, at any time, without affecting prior lawful processing.

To exercise any of these rights, email hola@seobeni.com with a clear description of your request and a copy of your ID. We will respond within 30 days.

You also have the right to lodge a complaint with Spain's data protection authority: Agencia Española de Protección de Datos (AEPD) — www.aepd.es.

8. Cookies

This website uses cookies. For full details of which cookies we use, their purpose, duration and how to manage them, please see our Cookies Policy.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These include HTTPS encryption, access controls, and regular review of our data practices. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law or our practices. The "Last updated" date at the top of this page will always reflect the most recent version. Continued use of this website after changes constitutes acceptance of the updated policy. For material changes we will endeavour to notify you by email if you have an active relationship with us.

11. Contact

For any questions, requests or complaints about how we handle your personal data, please contact us at: