Privacy Policy



Sudespacho Cloud, S.L.


Management of clients, pre-clients or interested parties Marketing and advertising


Express consent Execution of contract/application of pre-contractual measures Compliance with legal obligation Legitimate interest


Iberley Información Legal S.L. Editorial Colex, S.L.


Access, rectify and delete the data, as well as other rights, as explained in the additional information

Additional Information

To consult additional information and in greater detail on Data Protection, continue reading



Additional Information

*Personal Data will be considered to be those that the user provides when activating a demo or filling in a contact form, as well as those generated while browsing the Website and by using the products or services of Sudespacho Cloud S.L. The user must provide truthful information regarding their Personal Data and keep it updated (to communicate any changes to their data, see the “Rights of interested parties” section). Users who provide false information may be excluded from the products or services of Sudespacho Cloud, S.L.







Additional Information

Who is responsible?

Sudespacho Cloud, S.L. B15879547
  • Contact information:

Tlf: 981 160 120 Email: Dirección: C/ Costa Rica nº 5, 3º comercial puerta A, 15004, A Coruña


  • Identity and data of the representative:

 Ángel Gandoy Fernández (33328879Q)  – Tlf: 981160120  –  Email:


What is the purpose of the treatment? And what is the basis that legitimizes the treatments?

The possible purposes are: 

–Management of clients, pre-clients or those interested in products or services

–Marketing and advertising


The legal bases of the treatment may be:

–Express consent art. 6.1.a) of the RGPD

–Execution of contract/application of pre-contractual measures art. 6.1.b) of the RGPD

–Compliance with legal obligation art. 6.1.c) of the RGPD

–Satisfaction of legitimate interests art. 6.1.f) of the RGPD

  • Extended description of the purposes and bases of legitimacy of the treatment: :

1. Among the main purposes of data processing are the management and control of the registration of clients and/or pre-clients, users or interested parties, maintenance of subscriptions, control of demo activations or other contracts, in accordance with this policy and with the general terms and conditions applicable in each case, as well as the management of queries and requests sent through the forms or chats provided on the company's website.


The legitimacy for the processing of personal data for these purposes is: – in the case of clients, the execution of the contract in which they are a party, for the adequate maintenance, fulfillment, development, training, control and execution of the contractual relationship established between both parties, as well as, to carry out adequate economic, fiscal and accounting management (art. 6.1.b) of the RGPD). – In the case of pre-customers or users of the web, the legitimacy is based on the express consent that they must mark when trying to send a form or activate a demo. Said consent is not pre-marked and is necessary to send the corresponding form, so the user, as indicated, should read it before accepting it (art. 6.1.a) of the RGPD).


2. For the sending of information, advertising emails, referral of offers, and any other personalized commercial actions similar to those that the client or user has consulted or contracted (by means of the elaboration of a commercial profile based on the information provided in forms or during navigation on this Website or other websites of the group companies) by electronic or non-electronic means, about the company's products, services and content (including making commercial calls). The legitimacy for sending commercial communications of products or services similar to those that have been previously contracted is based on the legitimate interest of the company to improve its services, products or brands and on the prior consent provided during the contracting (art. 6.1 .f) of the RGPD). For all other purposes, the legitimacy is based on the prior consent of the client or user by checking the corresponding acceptance boxes of this privacy policy. You have the right to withdraw your consent at any time in accordance with the procedure established in the section “What rights do you have?”, without this affecting the legality of the treatment based on the consent prior to its withdrawal.


3. If for the fulfillment of a legal obligation it is necessary to treat, store or transfer your data, it will be done based on the legitimacy provided by art. 6.1.c) of the GDPR.


  • Automated decisions, profiles and applied logic:

Currently, our company does not perform profile analysis or automated decision making. Currently, the Website uses cookies and other data storage and retrieval devices to analyze the needs, tastes and preferences of the user, to personalize the content and services displayed and/or or the creation of a commercial profile based on the information provided on the Website.


The processing of Personal Data obtained through cookies and the aforementioned data storage and recovery devices will be carried out in accordance with the provisions of this Privacy Policy and the corresponding Cookies Policy. The legitimacy for this purpose is based on the legitimate interest of Sudespacho Cloud S.L. to improve its contents and services, and the user's consent for the use of cookies and the creation of a commercial profile.


You can configure at any time the cookies that you accept as detailed in the Cookies Policy of the website and you can withdraw your consent at any time in accordance with the procedure established in the "Rights of interested parties" section, without affecting the legality of the treatment based on the consent prior to its withdrawal.



  • Obligation or not to provide data and consequences of not doing so:

For the correct provision of the services, it is necessary for the client/interested party to provide their identification data (such as: name and surname, NIF, address, contact telephone number, email address, account number...) in order to be able to register them. as a client, perform billing, contact and provide support, provide training... In the event that the data indicated as mandatory is not provided, the contract cannot be successfully completed and therefore the service cannot be provided.



Deadlines or criteria for data retention

 –Customer data

–Data of former clients, pre-clients or users


  • Deadlines or criteria for data retention:

Customer data: they will be kept for the duration of the contractual relationship, provided that you do not exercise your right of deletion, opposition or limitation of the treatment, and subsequently for the fulfillment of the legal or regulatory obligations derived from the contractual relationship or eventual responsibilities or claims (for example: invoices will be kept for 10 years).


Data of former clients, pre-clients or users: to carry out promotional actions or commercial profiles, for a period of 5 years, without prejudice to the conservation that is necessary for the formulation, exercise or defense of potential claims and/or always permitted or required by law. If Curriculums are received (although this is not a purpose of our website): they will be kept for a maximum of 2 years or during the specific selection process that was running.


To whom do we provide your data?

  • Yes, assignments will be made to group companies
  • No international transfers will be made
  • Recipients or categories of recipients:

Your data will be transferred to the companies that make up the group, specifically to the companies: 1. Iberley Information Legal S.L. (legal and juridical database) 2. Editorial Colex, S.L. (legal publisher) in order to allow them to carry out personalized commercial actions on products or services and content from the legal and/or publishing sector that may be of interest to them based on their commercial profile.


  • International data transfers outside the European Union are not expected.

What rights do you have?

You can exercise the rights of access, rectification, deletion, opposition, blocking, treatment limitation, portability and/or the right not to be subject to individualized decision-making
  • You can exercise your rights in writing with the subject “Exercise of rights” at:

– email to the address: – postal mail to the address: Sudespacho Cloud S.L. – C/ Costa Rica nº 5, 3º commercial door A, 15004, A Coruña. Remember that you must indicate your name and surname, postal or email address and attach a copy, photocopy or scan of your DNI, passport or identification document, as well as the right you wish to exercise.


    • You have the right to withdraw the consent given at any time, without the need for any reason, by following the steps indicated in the previous paragraph. The revocation of the consent given will not affect the use that you can make of the Website, nor the legality of the treatment based on said consent prior to its withdrawal.
  • Likewise, if you consider that the exercise of your right on our part has not been adequately satisfied, you have the right to claim before the Spanish Agency for Data Protection, or other control authorities, through its website.

Where do we get your data from?What's your origin?

  • Directly from you or your legal representative
  • Sources accessible to the public and/or telephone directories.
  • Transfer of data by any of the group companies
  • Data source information:

a. request for information made by you by telephone, through a contact form, or through chat through the Website b. application for registration of a program in demo or lite c. publicly accessible sources such as lists of people belonging to professional groups d. telephone directories with professional information e. transfer of the same by one of the companies of the group


  • Categories of data that are processed:

Only data of an identifying nature that is necessary for contracting or requesting information is processed. Unless clearly stated otherwise in relation to a product, service, these are NOT aimed at children under 14 years of age, so if there is evidence at any time of a registration by a child under 14 years of age, the registration will be canceled. and prevent access or use of products or services associated with that minor.


Additional Information


About Sudespacho Cloud SL and its figure as treatment manager










Registration of Accounts with External Providers

In those cases in which SUDESPACHO appears as Data Processor, it assumes the obligations established for this purpose, and states that it will only process the data in accordance with the instructions of the person responsible for the file and that it will not apply or use them for purposes other than those that appear in the contract. held for the purpose. In any case, we recommend that you consult our General Contracting Conditions (at the bottom of the web page).


The user of the Site will be solely responsible for the veracity and accuracy of the data provided, Sudespacho Cloud SL acting, as owner of the Website, in good faith as a mere service provider. In case of having provided false data or data from third parties without their consent, the owner of the website reserves the right to immediately destroy said data in order to protect the right of the owner or owners thereof. SUDESPACHO undertakes to comply with its obligation to secrecy of personal data and its duty to store it and will adopt all technical and organizational measures to guarantee the security of personal data and prevent its alteration, loss, treatment or unauthorized access, taking into account the state of the technology, the nature of the data stored and the risks to which they are exposed.


The website has information security measures generally used to prevent unauthorized access to personal data. Please read this privacy statement carefully before using this Site, you will know how we will process your personal data.


  • If you register your Services through our website at, or through a separate subscription agreement with us, then as part of such registration we will ask you to provide us with certain personal information, including your name, company name , your email address and password. If you create an account or log in to the Services using third party services, such as Google, Facebook, or LinkedIn, we will receive your name and email address and/or phone number as permitted by your profile settings on the third party service. in order to authenticate you. The information we receive when you verify your authenticity through a third party site will depend on the settings, permissions and privacy policy controlled by the third party service. It is your duty to check the privacy settings and notices on the relevant third-party services to understand what data may be disclosed to us or shared with our Services.