Privacy statement

This privacy policy explains how Fortalis SL processes personal data when you visit our website www.fortalis.cloud

1. Controller

Fortalis SL, located at Av. Montseny 65, 08812 Sant Pere de Ribes, Barcelona, Spain, is the controller responsible for your personal data.

2. What personal data do we process?

We may collect the following information.

When you contact us via the contact form:

• Name
• Email address
• Phone number

When you visit our website:

• Page views and technical data via Google Analytics 4 (GA4)
• Cookie preferences via Cookiebot

We do not collect sensitive personal data or use behavioral tracking.

3. Purpose and legal basis

We process your data based on:

• Consent: for analytics and cookie preferences via Cookiebot
• Legitimate interest: to respond to your direct inquiries

Purposes:

• To respond to your questions or requests
• To understand basic website usage (only with your consent)
• To manage cookies and user preferences

4. Use of cookies and Consent Mode

We use a cookie banner provided by Cookiebot to ask for your consent before setting cookies.

• We use Google Consent Mode v2 to adjust the behavior of Google services based on your consent choices.
  
• Without your consent, no analytics cookies are placed. Only anonymized signals are sent.
• You can view and change your cookie settings at any time via the cookie banner on our website.
• You can find a full overview of all cookies used here
  

5. Third-party processors

We work with the following data processors:

• Cognito Forms – form submissions
  
• Weglot – multilingual website
• Google – analytics
• Cookiebot – cookie management
  
• Webflow – website hosting
  

All partners operate under signed Data Processing Agreements (DPAs) in compliance with GDPR.

6. Data retention

We store your personal data:

• Contact form data: max. 90 days
  
• Cookie and analytics data: as configured in GA4 or until consent is withdrawn

7. Your rights

You have the right to:

• Access your data
  
• Request correction or deletion
• Restrict or object to processing
• Withdraw consent
• Request data portability

You can contact us at privacy@fortalis.cloud to exercise these rights. You may also file a complaint with your national data protection authority.

8. Data security

We implement appropriate security measures, including:

• SSL encryption
  
• Access controls
• Secure hosting (Webflow)

9. International data transfers

Some data may be processed outside the EU/EEA by our service providers. In these cases, we ensure appropriate safeguards such as standard contractual clauses (SCCs).

10. Changes to this policy

We may update this privacy policy from time to time. The latest version will always be available at: