Infrastructure - DevOps - Security

Privacy Policy

How SysRoot collects, uses, retains, and protects personal data.

Last updated: August 11, 2026
This Privacy Policy explains how SysRoot processes personal data when you visit this website, submit an inquiry, or communicate with us. It also explains your rights under the EU General Data Protection Regulation (GDPR) and applicable Spanish data protection law.
1. Data Controller
  • Controller and commercial name: SysRoot
  • Establishment: Valencia, Spain
  • Privacy contact: [email protected]
2. Personal Data We Collect
  • Inquiry data: company, name, work email, phone number, website, infrastructure details, service requirements, urgency, budget range, timezone, and message content.
  • Communication data: correspondence and information you send when discussing a request, proposal, or service.
  • Technical and security data: IP address, request time, requested URL, browser information, and server or security logs generated when you use the website.
  • Analytics and advertising data: device, usage, campaign, and interaction information collected by Google Ads and Microsoft Clarity only after you accept the relevant cookies.
Please do not send passwords, private keys, production data, health information, or other sensitive personal data through the contact form.
3. Purposes and Legal Bases
  • Responding to inquiries, assessing requirements, and preparing a requested proposal: taking steps at your request before entering into a contract (Article 6(1)(b) GDPR).
  • Providing agreed services and managing customer communications: performance of a contract (Article 6(1)(b) GDPR).
  • Keeping accounting, tax, and legally required records: compliance with legal obligations (Article 6(1)(c) GDPR).
  • Protecting the website, preventing abuse, troubleshooting, and maintaining operational security: our legitimate interest in operating a secure and reliable website (Article 6(1)(f) GDPR).
  • Measuring campaigns and website interactions through Google Ads and Microsoft Clarity: your consent (Article 6(1)(a) GDPR). These services are not loaded before consent.
We do not use contact-form data for email marketing unless you separately and expressly request or consent to it.
4. Required and Optional Information
Fields marked as required in the contact form are needed to identify and respond to your request. If you do not provide them, we cannot process the inquiry. All other fields are optional, but providing them may help us assess the request more accurately.
5. Recipients and Service Providers
We do not sell or rent personal data. Data is disclosed only when necessary to:
  • hosting, database, infrastructure, backup, and email providers that process data on our behalf;
  • Google Ireland Limited for Google Ads and Microsoft Ireland Operations Limited for Microsoft Clarity, when you have consented to the relevant cookies;
  • professional advisers such as legal, accounting, or compliance providers where necessary; and
  • public authorities where disclosure is required by law.
6. International Transfers
Some technology providers may process personal data outside the European Economic Area. Where this occurs, transfers are based on an applicable European Commission adequacy decision, including the EU-US Data Privacy Framework where available, or appropriate safeguards such as the European Commission Standard Contractual Clauses. Further information about cookies and their providers is available in our Cookie Policy.
7. Retention
  • The initial website inquiry record is retained for up to 12 months after submission. Related correspondence that does not result in a customer relationship is retained for up to 12 months after the last communication, unless it is needed to establish, exercise, or defend a legal claim.
  • Customer and service records are retained for the duration of the relationship and afterwards for the applicable legal, accounting, tax, and limitation periods.
  • Technical and security logs are retained only for the period reasonably necessary for security, troubleshooting, and abuse prevention, and may be retained longer when connected to an incident.
  • Cookie and analytics retention periods are described in the Cookie Policy and the relevant provider information.
8. Your Rights
Depending on the circumstances, you may exercise your rights of access, rectification, erasure, restriction, data portability, and objection. Where processing is based on consent, you may withdraw that consent at any time without affecting processing carried out before withdrawal.
Send a request to [email protected]. We may request information needed to verify your identity and will respond within the period required by GDPR. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).
9. Automated Decisions and Profiling
We do not use contact-form data to make solely automated decisions that produce legal or similarly significant effects. Analytics services may create usage or advertising profiles only after the required cookie consent has been provided.
10. Security
We use appropriate technical and organizational measures to protect personal data against accidental or unlawful loss, alteration, disclosure, or access. No internet transmission or storage system can be guaranteed to be completely secure.
11. Cookies
Necessary storage is used to operate the website and remember your cookie choice. Optional tracking technologies are used only after consent. You can change your choice at any time through Cookie Settings in the website footer. See our Cookie Policy for more information.
12. Policy Updates
We may update this policy when our processing activities, providers, or legal obligations change. The current version and revision date will remain available on this page.