# Privacy policy. Canonical source: [Privacy policy.](https://multiconversion.com/en/privacy-policy/) Language: en > Who processes your data on multiconversion.com, what for, on what legal basis, for how long, which providers are involved and how to exercise your rights. Available versions: [es](https://multiconversion.com/politica-de-privacidad/index.md) · [en](https://multiconversion.com/en/privacy-policy/index.md) · [pt](https://multiconversion.com/pt/politica-de-privacidade/index.md) legal · privacy Who processes your data when you use multiconversion.com and its blog, what for, for how long and how to exercise your rights. Last updated on 1 November 2026. ## Data controller The controller of the personal data collected on this website and its blog is: Company Multiconversion S.L. Tax ID (CIF) B98747629 Registration Commercial Registry of Valencia (Registro Mercantil), volume 9983, book 7265, folio 169, sheet V-166063 Registered office Calle Islas Canarias, 34, bajo C · 46023 Valencia (Spain) Legal phone +34 963 767 470 Legal / privacy email [valencia@multiconversion.com](mailto:valencia@multiconversion.com) Activity Digital marketing agency These are also the website owner details required by article 10 of Spanish Law 34/2002 on information society services (LSSI). For any question about your data, write to [valencia@multiconversion.com](mailto:valencia@multiconversion.com). For projects and proposals, contact our [sales office at Calle Moratín 14](https://multiconversion.com/en/contact/#oficina-comercial), phone +34 686 568 904, email hola@multiconversion.com. ## What data we process, why and for how long We only ask for the data we need for each purpose. The fields marked as required in each form are needed to help you; without them we cannot. ### Contact and audit requests Data Name, email, phone, company, website, budget, topic and message; if provided, sector, project timeframe and how you heard about us. Also the language and where the visit came from: landing page, referring website and campaign parameters (utm, gclid, fbclid, msclkid). We distinguish your stated source from browser-origin indicators. These commercial fields reach our team to handle and classify your enquiry; we do not send their contents to Google Analytics or AI assistants. Purpose Answering your request, preparing the audit or proposal you ask for and knowing which channels bring us enquiries. Legal basis Taking pre-contractual steps at your request (article 6.1.b GDPR). For the visit-origin data, our legitimate interest in knowing which channels work (article 6.1.f). How long While we handle your request and, afterwards, until any liability arising from it has lapsed. ### Kit Digital updates and preparation Data Name, email and profile; phone number if provided. Also the consent wording, version and date, visit-origin data and business information you provide while preparing your case. Purpose Contacting you to review your case, explain which documents you can prepare and notify you of a possible new call. Our team receives the request by email; submitting this form does not subscribe you to the newsletter or submit an official grant application. Legal basis Your specific consent (article 6.1.a GDPR). For visit-origin data, our legitimate interest in knowing which channels work (article 6.1.f). How long Until you withdraw consent or we finish handling the requested update. We periodically review pending requests and delete those no longer needed; evidence needed for possible liabilities is retained with access restricted. Unsubscribe at valencia@multiconversion.com. ### Optional campaign measurement on OpenAI Data Confirmation of a commercial enquiry, a random event identifier and the oppref click identifier when available. The measurement image request also communicates technical connection data, such as your IP address and browser type. We do not send OpenAI the form contents (name, email, phone number, message, website or any other fields), or give it automatic access to its fields. Purpose Measuring which OpenAI campaigns generate confirmed commercial enquiries, including Kit Digital enquiries, and evaluating their results. Rejecting this permission does not prevent us from handling your enquiry. Legal basis Your optional Advertising consent (article 6.1.a GDPR), independent of Analytics permission and any consent required by the form itself. How long The first-party mc\_openai\_oppref cookie stores the click identifier for up to 30 days and is deleted when Advertising permission is withdrawn. The technical mc\_lead marker, which contains no form data, lasts up to 5 minutes. These periods apply to browser storage, not to retention of events received by OpenAI. ### Newsletter Data Your email and language. Purpose Sending you the monthly newsletter. Legal basis Your consent when you subscribe (article 6.1.a GDPR). How long Until you unsubscribe, with the link in every email or by writing to us. ### WhatsApp conversations Data Your number and what you write to us. For conversations started through the former blog button, this also includes the source data recorded at the time: page, campaign parameters and, if you accepted analytics, Google Analytics identifier. The widget was removed on 29 September 2026. Purpose Answering your question and knowing where it came from. Legal basis Your request (article 6.1.b GDPR) and our legitimate interest in knowing where enquiries come from (article 6.1.f). How long As for contact requests. ### Job applications Data What you send us by email: your CV and contact details. Purpose Assessing your application in our recruitment processes. Legal basis Your request to take part in the process (article 6.1.b GDPR) and, if you allow us to consider you for others, your consent (article 6.1.a). How long While the recruitment process lasts. If you allow us to consider you for others, until you ask us to delete it. ### Blog comments Data Name, email, website (if you give it), the comment and the IP address you send it from, which WordPress keeps to fight spam. Purpose Publishing and moderating your comment. Legal basis Your consent when you send it (article 6.1.a GDPR). How long While the comment is published or until you ask us to delete it. ### Clients and suppliers Data Contact details of the people we work with and billing details. Purpose Managing the relationship, the services and invoicing. Legal basis The contract (article 6.1.b GDPR) and our tax and commercial obligations (article 6.1.c). How long While the relationship lasts and, afterwards, the periods required by law: 6 years under the Spanish Commercial Code and 4 under the General Tax Law. ### Form security Data Your IP address and technical browser data. Purpose Checking that a form is sent by a person (Cloudflare Turnstile) and limiting repeated submissions from the same address. For that we keep a digest of the IP, not the IP itself, and only the last 10 minutes count. Legal basis Our legitimate interest in protecting the website, and the people who write to us, from spam (article 6.1.f GDPR). How long Cloudflare processes it at the moment of the check; the IP digest stops counting after 10 minutes. Analytics cookies and OpenAI Advertising measurement require separate, optional permissions. We explain them, together with the cookies we use, in the [cookie policy](https://multiconversion.com/en/cookie-policy/). We do not make automated decisions or build profiles with your data. ## Who else sees your data We do not sell your data. We disclose it when the law requires us to, for example to the Spanish Tax Agency or to courts, and to services we need to help you. These providers process the data on our behalf and under contract: - Hetzner Online GmbH (Germany): hosting of the website, the blog and our CRM. - Sendinblue SAS, “Brevo” (France): sending the form notifications and the newsletter. - Google Ireland Limited: email (Google Workspace) and, with your permission, analytics (Google Analytics). - Cloudflare, Inc.: anti-spam verification of the forms. In addition, if you accept Advertising, OpenAI receives the measurement data described above through an image. Brevo continues sending the form notifications to our team; the personal data in those notifications is not transferred to OpenAI. If you write to us on WhatsApp, the conversation goes through WhatsApp Ireland Limited (Meta), under its own terms. Payments with clients and suppliers go through our banks. ## Transfers outside the European Economic Area Google, Cloudflare and Meta may process data in the United States. They take part in the EU-U.S. Data Privacy Framework, which the European Commission recognises as providing an adequate level of protection (decision of 10 July 2023), and they also apply standard contractual clauses. Hetzner and Brevo process the data in the European Union. ## Your rights You can ask us at any time to access your data, correct or erase it, object to or restrict its processing, and receive it in a format you can take to another service. If we process something based on your consent, you can withdraw it whenever you want, without affecting what was done before. Write to [valencia@multiconversion.com](mailto:valencia@multiconversion.com) or by post to our registered address, saying which right you want to exercise. We will only ask you to prove your identity if we have reasonable doubts that it is you. We reply within one month at the latest. If you think we have not handled your rights properly, you can complain to the Spanish Data Protection Agency ([www.aepd.es](https://www.aepd.es/), C/ Jorge Juan, 6, 28001 Madrid) or to the data protection authority of the EU country where you live. ## Minors The website is not aimed at children under 14. If we learn that a child under that age has written to us without the permission of their parents or guardians, we will delete their data. ## Security The website and the forms are encrypted (HTTPS), only the team members who need the data can access it and we choose providers with sufficient guarantees. If there were a security breach affecting you, we would tell you when the law requires it. ## Accurate and third-party data The data you give us must be yours and true. If you give us someone else’s, you must have informed them and have their permission. ## Changes to this policy If we change how we process data, we will update this page and its date. If the change needs your permission, we will ask for it.