Data Protection

Consultoría EHERO SLU is aware of the importance of guaranteeing the right to privacy and the protection of Users’ personal data. In this regard, and in compliance with Regulation (EU) 2016/679 of 27 April 2016, the General Data Protection Regulation (GDPR), as well as applicable Spanish data protection legislation, the following information is provided regarding the processing of personal data carried out through this website and the relationships maintained with Users.

Data Controller

• Identity: Consultoría EHERO SLU
• Tax ID: B72671100
• Email: info@consultoriaehero.com
• Registered office: Rua Emilia Pardo Bazán 25 A2, 36204 Vigo (Pontevedra), Spain

Consultoría EHERO SLU acts as the data controller for Users’ personal data in relation to the purposes described in this Privacy Policy.

This Privacy Policy governs the processing of personal data provided by users (the “User” or “Users”) of the Consultoría EHERO website (the “Website”), as well as any data that may be provided by email, instant messaging, customer service phone lines, contracting or purchasing processes for services and software licenses, or through authorized distributors and partners.

The purpose of this Privacy Policy is to explain how Consultoría EHERO SLU collects, processes and protects personal data, so that Users can freely and voluntarily decide whether they wish to provide their personal data through the forms made available for that purpose or through the various communication and contracting channels available.

The personal data that Consultoría EHERO SLU collects through the Website or through the various communications it maintains with the User will be processed with due confidentiality. Consultoría EHERO SLU undertakes to keep such data secret and to adopt appropriate technical and organizational measures to prevent alteration, loss, unauthorized processing or access.

Once the User’s data has been received, Consultoría EHERO SLU will apply appropriate security measures and procedures to prevent any unauthorized access and ensure the security and confidentiality of the information processed.

What are the main purposes of processing your data?

Through the Website and the various communication and contracting channels available, Consultoría EHERO SLU collects and processes personal data for the following purposes:

Respond to and manage your service requests

We will use your data to respond to and manage any request for web design, consulting, digital marketing, business development or other related services that you make to us, as well as to manage the pre-contractual or contractual relationship, invoicing and collection of the contracted services.

Manage software licenses

We will use the necessary data to issue, activate and manage the software licenses contracted by the User, as well as to provide the support associated with those licenses.

Likewise, we will use the necessary data to manage service communications related to the licenses, including expiry and renewal notices, security incidents, relevant changes in the software or applicable terms, and notices about the status of the license or installation.

The legal basis for this processing is the performance of the contract or the application of pre-contractual measures at the User’s request, in accordance with Article 6(1)(b) of Regulation (EU) 2016/679.

Technical verification of licenses and prevention of unauthorized use

Certain software programs, plugins and modules marketed by Consultoría EHERO SLU periodically communicate with our servers to verify the validity of the license, check the number of active installations, prevent unauthorized use and allow access to available updates where applicable.

Within the framework of this technical verification, only the data necessary for that purpose may be processed, including the license key, the email address associated with the license, the installation domain, the software version, technical data about the environment in which the software runs, the IP address and the date and time of the request.

Technical verification is a necessary part of the operation of the licensed software and the management of the contracted licenses.

Consultoría EHERO SLU does not access, through these verification mechanisms, the content of the User’s store or website or the data of its customers, orders, products or any other business information.

The legal basis for this processing is the performance of the contract, in accordance with Article 6(1)(b) of Regulation (EU) 2016/679, as well as the legitimate interest of Consultoría EHERO SLU in protecting its intellectual property rights, preventing fraud and preventing unauthorized use of its products, in accordance with Article 6(1)(f) of Regulation (EU) 2016/679.

Manage service communications

We will use the contact details associated with the contractual relationship or license to send the communications necessary for the proper provision of the contracted service.

These communications may include license expiry and renewal notices, security incidents, relevant changes in the software or applicable terms, information related to the status of the license or installation, and other communications necessary for the management and provision of the contracted services.

These communications form part of the contracted service and are not promotional in nature.

The legal basis for this processing is the performance of the contract, in accordance with Article 6(1)(b) of Regulation (EU) 2016/679.

Manage the sending of our own commercial communications

Consultoría EHERO SLU may send information about its own products and services similar to those previously contracted by the User, including web design services, consulting, digital marketing, SEO, software, plugins, modules and other related services, in accordance with Article 21(2) of Law 34/2002 on Information Society Services and Electronic Commerce.

The User may object at any time, easily and free of charge, to the sending of commercial communications by using the link provided in the communications themselves or by contacting info@consultoriaehero.com.

Objecting to the sending of commercial communications will not affect the service communications necessary for the management and performance of the contractual relationship or license.

The legal basis for this processing is the legitimate interest of Consultoría EHERO SLU, under the terms provided for in Article 21(2) of the LSSI-CE, without prejudice to the User’s right to object at any time to the processing of their data for commercial purposes.

Manage the sending of our Newsletter

When the User has expressly subscribed to our Newsletter, we will use their contact details to send them information, news and updates about our services, products and other matters related to the activity of Consultoría EHERO SLU.

The User may withdraw their consent at any time by using the link provided for that purpose in each communication or by contacting info@consultoriaehero.com.

The legal basis for this processing is the User’s consent, in accordance with Article 6(1)(a) of Regulation (EU) 2016/679.

What is the legal basis for processing your data?

The legal bases that legitimize the processing described in this Privacy Policy are as follows:

• Performance of a contract or application of pre-contractual measures: to respond to requests, manage the contracting of services, manage software licenses, carry out invoicing and provide the contracted services.

• Performance of the contract: to issue, activate and verify software licenses, provide the associated support and send the service communications necessary for the proper provision of the contracted services.

• Legitimate interest: for fraud prevention, protection of Consultoría EHERO SLU’s intellectual property rights and the sending of commercial communications about similar own products and services previously contracted, always respecting the User’s right to object.

• Consent: for sending the Newsletter and for those processing activities that legally require the User’s consent.

• Compliance with legal obligations: to comply with tax, accounting, commercial and other legal obligations applicable to Consultoría EHERO SLU.

How long will we keep your data?

Personal data will be kept for as long as necessary to fulfill the purposes for which it was collected and while the contractual or commercial relationship with the User is maintained.

Once the relationship has ended, the data may be kept duly blocked for the periods necessary for the formulation, exercise or defense of possible claims, as well as for compliance with applicable legal obligations.

Data related to software licenses and the contractual relationship will be kept for the duration of the relationship and thereafter for the legally applicable limitation periods.

Data related to invoicing and accounting and tax obligations will be kept for the periods established by applicable regulations and, in particular, for the retention periods required by tax and commercial regulations, which may extend up to six years under applicable law.

Data processed for the sending of commercial communications will be kept as long as the User does not object to such processing and, in any case, as long as there is a legal basis allowing its retention.

Data used for sending the Newsletter will be kept as long as the User maintains their consent or until they unsubscribe or withdraw that consent.

Once the applicable retention periods have ended, the data will be securely deleted or anonymized.

Source of the data

As a general rule, the personal data processed by Consultoría EHERO SLU comes directly from the User themselves, whether through Website forms, email communications, telephone, messaging, contracting processes or the purchase of services and software licenses.

However, when a software license has been acquired through an authorized distributor or partner, they may have provided Consultoría EHERO SLU with certain identification and contact details of the User, such as their name, email address, billing details and activation domain, for the purpose of issuing the license in their name, activating it and providing the associated support.

In these cases, Consultoría EHERO SLU acts as the data controller for the data received for the purposes described in this Privacy Policy.

The authorized distributor or partner will be responsible for the processing of the data they have collected directly from the User within the framework of the contractual or commercial relationship they maintain with them, in accordance with their own privacy policy and the obligations applicable to them.

Who may be recipients of the data disclosure?

Personal data may be communicated or made available to third-party service providers when necessary to achieve the purposes described in this Privacy Policy.

In particular, those providers who provide services necessary for the activity of Consultoría EHERO SLU may have access to personal data, including, among others:

• Hosting and technology infrastructure service providers.

• Email and communications service providers.

• Billing and administrative management service providers.

• Payment providers and gateways, when necessary to manage a transaction.

• Technical, IT and support service providers.

These providers will act, where appropriate, as processors, in accordance with Article 28 of Regulation (EU) 2016/679, and will be subject to the corresponding confidentiality and security obligations.

Likewise, data may be disclosed to public bodies, administrative authorities, judicial bodies and other entities when there is a legal obligation to do so.

International data transfers

Currently, Consultoría EHERO SLU does not carry out international transfers of personal data outside the European Economic Area.

What are your rights when you provide us with your data?

Any person has the right to obtain confirmation as to whether or not Consultoría EHERO SLU is processing personal data concerning them.

The User has the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, the User may request the restriction of the processing of their data, in which case they will only be retained for the exercise or defense of claims.

Likewise, the User may object to the processing of their personal data when circumstances related to their particular situation apply, especially in those processing activities based on legitimate interest.

The User may object at any time to the sending of commercial communications from Consultoría EHERO SLU. If they exercise the right to object to the sending of advertising, their data may be included in an advertising exclusion list in order to ensure compliance with their request.

Data subjects have the right to data portability when the processing is based on consent or on the performance of a contract and is carried out by automated means, under the terms established by applicable regulations.

Likewise, the User has the right to withdraw at any time the consent given for those processing activities whose legal basis is consent, without affecting the lawfulness of processing based on consent prior to its withdrawal.

To exercise their rights, the User may contact info@consultoriaehero.com in writing, indicating the right they wish to exercise and providing the information necessary to identify the request. When necessary to verify the identity of the applicant, Consultoría EHERO SLU may request additional information or a copy of an official identification document.

The exercise of rights will be free of charge, unless the requests are manifestly unfounded or excessive, especially due to their repetitive nature, in which case the measures provided for in Article 12 of Regulation (EU) 2016/679 may apply.

We also inform you of your right to lodge a complaint with the Spanish Data Protection Agency (AEPD), the competent supervisory authority for personal data protection in Spain.

Additional information

Minors

Children under 16 must refrain from providing us with their personal data without the authorization of their parents, mothers or legal guardians when such authorization is required under applicable regulations.

Consultoría EHERO SLU does not knowingly intend to collect personal data from minors when applicable regulations require the consent of their legal representatives.

Updating data

The User undertakes to communicate any changes to their personal data so that the information held by Consultoría EHERO SLU remains up to date and accurate.

Confidentiality and security

Consultoría EHERO SLU undertakes to process Users’ personal data confidentially and to adopt appropriate technical and organizational measures to ensure a level of security appropriate to the risk, taking into account the state of the art, implementation costs and the nature, scope, context and purposes of the processing.

However, the User should bear in mind that no security measure can guarantee absolute protection against all existing risks.

Changes to the Privacy Policy

Consultoría EHERO SLU may modify the terms and conditions of this Privacy Policy at any time to adapt it to regulatory, case-law or technical changes, or to changes in the services and processing carried out.

Any modification will be published on the Website and will take effect from its publication, unless a different period or procedure is required by law or by the nature of the change.

When the changes significantly affect the rights or interests of Users, Consultoría EHERO SLU may adopt any additional information measures that may be necessary in accordance with applicable regulations.

Last updated: 31 July 2026