Privacy Policy
Last updated: July 1, 2026
At Salware Foundation we take privacy seriously. This policy explains what personal data we process through this website, for what purpose, for how long, and what rights you have. It applies to visitors of the site and to people who contact us through our forms.
1. Data controller
The controller of your data is Salware Foundation (“Salware”), tax ID (CIF) G02863587, registered address at Calle de Cuesta Blanca 119, 28108 Alcobendas (Madrid), Spain.
Contact email: info@salware.com.
Data Protection Officer (DPO): Alejandro Espinosa Lopez. You can reach the DPO at info@salware.com with “Data protection” in the subject line.
2. What data we process
We only process the data you voluntarily provide and the minimum technical data required for the operation and security of the site.
- Contact and school data you send through the pilot or information request form: full name, role, school or institution, type of school, education levels of interest, approximate number of students, email address, phone (optional) and any message you choose to include.
- Technical browsing data: IP address and user agent (browser and operating system), collected for security and abuse-prevention purposes when you submit a form.
- We do not collect special categories of data nor ask you for sensitive information. Please do not include health data, data about minors or other sensitive information in the message field.
3. Purpose and legal basis
We process your data for the following purposes and legal bases:
- To handle your request and contact you to assess a possible pilot or collaboration. Legal basis: pre-contractual measures taken at your request and your consent (art. 6.1.b and 6.1.a GDPR).
- To ensure the security of the site and prevent automated or fraudulent form submissions. Legal basis: our legitimate interest in protecting the service (art. 6.1.f GDPR).
- To comply with any legal obligations that apply to us. Legal basis: compliance with a legal obligation (art. 6.1.c GDPR).
4. How long we keep your data
We keep your data for as long as necessary to handle your request and manage any resulting relationship. If no relationship arises, contact data is kept for a maximum of 24 months from the last contact, unless you ask us to delete it earlier.
Once the purposes have been fulfilled, the data is blocked and kept solely at the disposal of the competent authorities during the applicable statutory limitation periods, after which it is securely deleted.
5. Recipients and processors
We do not sell your data or share it with third parties for commercial purposes. Only the providers that render services to us as data processors have access to it, under contracts that guarantee an equivalent level of protection:
- Vercel Inc., the hosting and delivery provider for the website.
- Salware's own contact-management (CRM) infrastructure, where received requests are recorded.
- Public authorities or bodies where there is a legal obligation to disclose.
6. International transfers
The data managed by Salware is hosted on servers located in the European Union.
If any of our providers processes data outside the European Economic Area, such transfer will always rely on an adequate safeguard under the GDPR: an adequacy decision of the European Commission, the EU-US Data Privacy Framework, or Standard Contractual Clauses, together with any additional security measures that may be necessary.
7. Your rights
You can exercise the following rights at any time by writing to info@salware.com, proving your identity and stating the right you wish to exercise:
- Access: to know what data of yours we process.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to request that we delete your data.
- Objection: to object to processing based on legitimate interest.
- Restriction: to request that we restrict processing in certain cases.
- Portability: to receive your data in a structured, commonly used format.
- Withdraw consent at any time, without affecting the lawfulness of prior processing.
8. Complaints
If you believe we have not processed your data properly, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es). We would nevertheless appreciate it if you contacted us first so we can try to resolve any issue.
9. Minors and student data
This website is aimed at education professionals (school leadership, teachers and staff of educational institutions) and is not directed to minors. We do not knowingly collect personal data of minors through this site.
Any processing of student data that may take place within the Salware educational platform is independent of this website and is governed by the data processing agreement (DPA) signed with each school, which acts as the controller of its students' data, with consent channeled through the school and families.
10. Information for United States residents (California)
If you are a California resident, the California Consumer Privacy Act (CCPA/CPRA) grants you rights over your personal information: the right to know what information we collect and how we use it, the right to request its deletion, the right to correct it, and the right not to be discriminated against for exercising these rights.
Salware does not sell or share your personal information for consideration, nor use it for cross-context behavioral advertising. To exercise your rights, you can write to us at info@salware.com.
11. Security
We apply appropriate technical and organizational measures to protect your data against unauthorized access, loss or alteration, including encryption of communications in transit and restricted access controls.
12. Changes to this policy
We may update this Privacy Policy to reflect legal or operational changes. We will always publish the current version on this page, indicating the date of the last update.
Other legal texts
This text is provided for information purposes. Please refer to the version in force on this page.
