Privacy Policy

1. Our commitment to your privacy

At Solsano (a brand of Carbosuelo SL) we take privacy seriously. When you provide information about yourself or your business, you trust us to act responsibly.

This policy describes how we collect, use, retain and protect personal data related to the use of our website and the enquiries you send us. By using the site or submitting a form, you accept the practices described here, without prejudice to the rights granted by law.

2. Data controller

The data controller is Carbosuelo SL (Solsano brand), based in Seville (Spain). Data protection contact: hola@solsano.es. Phone: +34 633 792 865.

3. What data we process

Depending on how you interact with us, we may process the following categories of data:

• Contact form: profile (farmer, cooperative, agricultural organisation, service company or other), full name, email address, phone number (optional), province (optional), company or organisation (optional) and your message or case description.
• Security-related technical data: IP address, session identifiers, anti-forgery (CSRF) tokens, submission timestamps and the result of anti-spam verification (Cloudflare Turnstile), needed to protect the form against abuse.
• Cookies and local storage: cookie consent preferences and form session data. Details are set out in the cookie policy.
• Technical browsing data: when third-party resources (fonts, icons, CDN) are loaded, those providers may receive technical data such as your IP address. We do not currently operate our own analytics or marketing tools on the site.

We do not request special categories of data (health, ideology, etc.) through the form. Please do not include unnecessary sensitive information in your message.

4. Purposes and legal bases

We process personal data for the following purposes and under the bases in Article 6 of Regulation (EU) 2016/679 (GDPR):

• Handling your enquiry and contacting you by email or phone about your request (conservation agriculture, carbon credits, partnerships or other). Basis: steps prior to entering a contract at your request (Art. 6.1.b) and, when you tick the acceptance box, consent (Art. 6.1.a).
• Ensuring the security of the site and form (prevention of spam, abuse and attacks). Basis: legitimate interests (Art. 6.1.f) in protecting our systems and users.
• Complying with legal obligations that may apply (e.g. responding to data-subject rights or lawful requests from competent authorities). Basis: legal obligation (Art. 6.1.c).
• Remembering your cookie choice and providing the requested service. Non-essential cookies are only activated with your consent. Basis: legitimate interest / requested service for essential cookies; consent (Art. 6.1.a) for optional ones.

5. Recipients and processors

We do not sell or rent your personal data. Access may be given, only as needed, to:

• Authorised staff of Carbosuelo SL responsible for handling commercial or technical enquiries.
• Service providers acting as processors or necessary suppliers: website hosting, email (SMTP) to deliver your message to our inbox, and Cloudflare (Turnstile) for form anti-spam verification.
• Public authorities, regulators or courts where there is a legal obligation or a valid request.

With these providers we maintain the contractual and security measures required where a processing agreement applies.

6. Retention periods

We keep data only for as long as needed for the stated purposes:

• Form enquiries: while the request is being handled and, at most, for a reasonable period for possible commercial follow-up or defence of claims (indicatively up to 3 years from the last contact, unless a contractual relationship requires a different period).
• Technical security and rate-limiting records (e.g. IP-based rate limiting): the minimum technical time required.
• Cookie preferences: according to the durations stated in the cookie policy.

After these periods, data are deleted or anonymised, unless a rule requires retention or they are needed to establish, exercise or defend legal claims.

7. International transfers

Some providers (e.g. Cloudflare, Google Fonts or CDN operators) may be located outside the European Economic Area or process data from third countries. In such cases, the safeguards set out in the GDPR (adequacy decisions, standard contractual clauses or other valid safeguards) apply where relevant. We do not transfer your data to third parties for marketing purposes without your consent.

8. Your rights

You may exercise the following rights regarding your personal data, under the GDPR and Spanish Organic Law 3/2018 (LOPDGDD):

• Access: know what data we process about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion when data are no longer needed or other legal grounds apply.
• Objection: object to processing based on legitimate interests.
• Restriction: ask us to restrict processing in the cases provided by law.
• Portability: receive the data you provided in a structured format, where applicable.
• Withdrawal of consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise them, write to hola@solsano.es stating which right you wish to exercise and providing the information needed to identify you. We will respond within the legal time limit.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es).

9. Security

We apply technical and organisational measures appropriate to the risk: encrypted transmission (HTTPS), session cookies with security attributes, CSRF tokens, anti-spam verification, submission rate limiting and origin checks on the form. No system is absolutely secure; if you detect an incident that may affect you, please notify us at hola@solsano.es.

10. Cookies

You can review the cookie inventory, purposes and how to manage them in our cookie policy.

11. Updates

We may update this policy to reflect legal, technical or processing changes. The date of the last update appears at the top of this page. We recommend reviewing it periodically.