Privacy policy of TramitaYa

1. Data controller

This Privacy Policy explains how TramitaYa processes the personal data of people who visit this website or request access through it.

TramitaYa is a product of Rossol. The data controller is the owner of Rossol, who operates the product:

• Controller: TramitaYa
• Contact: contacto@tramitaya.me

2. Scope of this policy

This policy covers only this website and the access request form.

It does not cover the data processing carried out inside the TramitaYa application when a firm uses it with its clients: in that case the firm is the data controller and TramitaYa acts as processor, under the terms of the corresponding processing agreement.

3. What data we process

This website requires no registration. The only personal data processed is:

3.1. Data from the access request form

• Nombre.
• Contact email.
• Firm (optional field).
• Your type of activity and your case volume.
• The content of the message you write.
• Confirmation that you have accepted this policy.

3.2. Technical data

• IP address, used temporarily, as a derived value, to rate-limit form submissions and prevent abuse.
• Technical server logs and a session identifier needed to protect the form.

3.3. What we do not do

• We use no web analytics or cross-site tracking.
• We use no advertising or third-party cookies.

4. Why we use the data and on what legal basis

We do not use your data for unsolicited commercial communications.

4.1. Responding to your request

• Purpose: to read your message, assess your case and reply, including any follow-up.
• Legal basis: your consent (article 6(1)(a) GDPR) and pre-contractual steps requested by you (article 6(1)(b)).

4.2. Security

• Purpose: to limit automated submissions and keep the site secure.
• Legal basis: our legitimate interest in protecting the service (article 6(1)(f) GDPR).

5. How long we keep it

• Requests received are kept for as long as needed to handle them and, if they do not lead to a relationship, for a reasonable period to evidence the exchange.
• The value derived from the IP is deleted automatically when the limiting period expires.
• Technical logs are kept for a limited period for security purposes.

6. Who can access your data

We do not sell or disclose your data for commercial purposes. Certain providers access it as processors, under contract:

• The hosting provider where this site runs.
• The email provider through which the form message is delivered.

7. Your rights

You may exercise at any time your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent.

• To exercise them, write to contacto@tramitaya.me.
• If you believe the processing does not comply with the rules, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Changes to this policy

We may update this Privacy Policy to reflect legal or service changes. The version in force is the one published on this page, with its last revision date at the top.