SLIGHE, S.L.
Privacy Policy
Updated: 19 October 2026
Controller
SLIGHE, S.L.; tax ID B05693502; Calle Río Arlanza 1, 1C, 28803, Alcalá de Henares, Madrid, Spain. Privacy requests: info@slighe.es.
Data, purpose and required fields
The form requests name, email and enquiry; company and project/sector are optional. We use the data to reply, understand needs and assess the requested services. Without required fields the form cannot be submitted. Do not include sensitive data or confidential documents. IP addresses and connection data may be processed for security and abuse prevention. Enquiries do not subscribe you to advertising and are not used in this implementation for commercial profiling or solely automated decisions with legal effects.
Lawful bases
Form enquiry data are processed on the basis of your specific consent to answer the request. Withdraw consent at info@slighe.es without affecting earlier lawful processing. Consent does not authorise marketing or unrelated uses. Limited security and abuse-prevention controls rely on the legitimate interest in protecting the service. A subsequent contractual relationship will have its own processing information.
Providers and international transfers
Enquiries go to solutions@slighe.es. Providers include Resend for sending, Microsoft 365 for email, and ChatGPT Sites infrastructure for hosting and security. Arsys manages domain/DNS; application code does not send it enquiry contents. We do not sell contact data; legally required disclosures may apply. Resend reports US storage despite the Ireland sending region and describes standard contractual clauses and the EU–US privacy framework as transfer safeguards. Hosting and email may involve international processing under their terms. Request information or a copy of applicable safeguards at info@slighe.es.
Retention
Enquiries without a contract are retained for a maximum of six months from the last substantive contact about the request. Automatic notices and internal actions do not restart the period. Records are then removed from ordinary use; where legally required, only necessary data remain restricted for applicable liability periods and are destroyed afterwards. Contract records follow their contractual and legal periods. Providers may have separate technical retention and backup cycles.
Rights and requests
Request access, correction, deletion, restriction, objection, portability where applicable and consent withdrawal at info@slighe.es or the registered address. Requests are handled without undue delay and generally within one month; an additional two months may be needed for complexity or volume, with reasons notified during the first month. Additional proportionate identity information is requested only where reasonably necessary. Complaints may be made to the Spanish Data Protection Agency: https://www.aepd.es.