Our commitment to GDPR

Last updated: 19 July 2026

1. What is GDPR

The General Data Protection Regulation (GDPR, Regulation EU 2016/679) and Spain's Organic Law 3/2018 on Data Protection and Digital Rights Guarantee (LOPDGDD) regulate how companies must handle the personal data of people in the European Union. At 3CWeb Marketing Online, S.L. we apply these principles both on our own website and in the projects we build for our clients.

2. Principles we apply

• Data minimisation: our forms only ask for the data strictly necessary to handle each request.
• Transparency: every form states the purpose for which data is collected and links to our Privacy Policy.
• Explicit consent: no consent checkbox comes pre-ticked; users must actively tick it.
• Encryption at rest: lead and booking data is stored encrypted (AES-256) in our systems.
• No advertising tracking: we don't install third-party analytics cookies or advertising pixels on our own website (see Cookie Policy).
• Limited retention: we don't keep data indefinitely; it's kept only while a legitimate purpose exists for it.

3. GDPR in the projects we build

When we design or develop a website or online store for a client, we build in by default the elements needed to help with GDPR compliance: legal texts (legal notice, privacy and cookies), forms with a non-pre-ticked consent checkbox, and cookie consent managers when the project requires them. Final legal compliance for each project remains the responsibility of each client as the data controller of their own data.

4. Exercising your rights

If you want to exercise your rights of access, rectification, erasure, objection, restriction or portability over data we process as controller (for example, if you've written to us via the contact form), you can do so by writing to info@3cweb.es. Full details are in our Privacy Policy.

5. Supervisory authority

The competent supervisory authority in Spain is the Spanish Data Protection Agency (AEPD), with whom you can file a complaint if you believe your data has not been processed in accordance with the law.