Privacy
Last updated: 11 November 2026.
1. Controller
TRUE REGENERATIVE, S.L.U. (B56895071), C/ Montseny 33, at. 2, 08756 La Palma de Cervelló (Barcelona, Spain). Privacy contact: info@trueregenerative.com. We have no data protection officer, as we are not required to appoint one.
2. What data we process and why
Contact form: name, email, organisation (optional), type of enquiry, message, page language and your acceptance of this policy. Purpose: to reply to your enquiry and, where appropriate, prepare a proposal or quote.
Quick diagnosis: name, email, phone (optional), location, crop, area, problem and your acceptance. The form does not accept files: if photos are needed, we will ask you for photos by email. Purpose: to assess your farm and reply with a first diagnosis. Please do not send us photos in which other people can be identified without their permission.
Access to the TR Academy and games: name, email, profile (farmer, technician, student or other), farm (optional), page language, form origin (web-aula or web-juegos) and your acceptance of this policy. Purpose: to give you free access to the Academy and games and to know which profiles use them. We try to save name, email and profile in HubSpot (CRM, EU region); if that is not possible, they are sent by email to info@trueregenerative.com via Web3Forms as an alternative. The farm, if given, may reach us by email only. We do not guarantee CRM registration. This form does not subscribe you to any newsletter. Your browser stores an access flag (localStorage) so we do not ask again. Legal basis: your consent (art. 6.1.a GDPR). Retention: as for other contacts (section 4).
Email: if you write to us directly, we process your address and what you tell us in order to reply.
Visit statistics: we count visits in aggregate with Counter (counter.dev): page visited, referring website, screen size and time zone. We do not use cookies for this and do not identify you. More in Cookies.
We also count visits with Cloudflare Web Analytics, and some actions (opening Calendly, going to the App, the Aula or the games, sending a form) with our own counter on our server. They use no cookies and store nothing in your browser; we do not store your IP or identify you: only the page, the language and the type of action, in aggregate. Legal basis: our legitimate interest in knowing which parts of the website work (Art. 6(1)(f) GDPR). You can turn it off in Cookies.
3. Legal basis
Contact and diagnosis: pre-contractual steps at your request (Art. 6(1)(b) GDPR) and our legitimate interest in answering the enquiries we receive (Art. 6(1)(f)). Newsletter and commercial communications: your consent (Art. 6(1)(a) GDPR and Art. 21 LSSI-CE), which you can withdraw at any time. Statistics (Counter) and HubSpot analytics cookies: your consent (Art. 6(1)(a) GDPR and Art. 22.2 LSSI-CE), which you can withdraw from “Cookie settings”. Fields marked * are needed to handle your request; without them we cannot reply.
4. Retention
Clients (assignments, quotes and invoicing): for the duration of the relationship and then 6 years to meet legal, accounting and tax obligations (Art. 30 of the Spanish Commercial Code and tax law).
Contacts and leads (forms, diagnosis, HubSpot CRM and newsletter): until you unsubscribe or ask for erasure or, at most, 2 years without activity on your part; after that we delete them. Statistics: aggregated data only.
5. Recipients and processors
We do not share your data with third parties unless required by law. These providers process it on our behalf as processors, under contract (Art. 28 GDPR):
| Provider | Purpose | Safeguard for transfers |
|---|---|---|
| Cloudflare, Inc. (USA) | Website hosting and delivery (Cloudflare Pages, CDN). Processes visitors’ IP address and technical data. Also aggregate visit statistics without cookies (Cloudflare Web Analytics) and our own action counter (Pages Functions). | EU-U.S. Data Privacy Framework (adequacy decision of 10/07/2023) and Standard Contractual Clauses. |
| Web3Forms – Web3Creative (India) | Receipt of the contact, diagnosis, business and app notification forms, and forwarding by email to info@trueregenerative.com. We delete submissions from Web3Forms within 2 years at most. | EU Standard Contractual Clauses (included in its DPA). Operates from India; sub-processors: AWS, Cloudflare, Hetzner, CleanTalk and Akismet (spam filtering: receive IP and email). |
| HubSpot, Inc. (EE. UU.; datos en la región UE, EU1) | CRM and forms: contact details and communication history; web analytics only if you accept it. | EU-U.S. Data Privacy Framework (adequacy decision of 10/07/2023) and Standard Contractual Clauses. |
| Calendly LLC (EE. UU.) | Call booking, only if you use the booking button. | EU-U.S. Data Privacy Framework (adequacy decision of 10/07/2023) and Standard Contractual Clauses. |
| Google LLC / Google Ireland Ltd. (Gmail) | Mailbox where we receive your messages and form notifications. | EU-U.S. Data Privacy Framework (adequacy decision of 10/07/2023) and Standard Contractual Clauses. |
| Sendinblue SAS – Brevo (Francia, UE) | Sending server (SMTP relay) for the emails we send from info@trueregenerative.com. The newsletter is not sent with Brevo. | No transfer: data processed in the EU. |
| Counter (counter.dev) – Irae Hueck Costa, Berlin (DE); servidores Linode, Frankfurt (DE) | Aggregated visit statistics, only if you accept analytics. | No transfer: data processed in the EU. |
6. International transfers
Some providers are based in the United States, so your data may be processed there. They do so with the safeguards in the table: the EU-U.S. Data Privacy Framework (you can check each certification at dataprivacyframework.gov) plus the European Commission’s Standard Contractual Clauses (Art. 46 GDPR). We do not embed Google Maps or YouTube players: videos are served from our own server.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to info@trueregenerative.com. Tell us which right you wish to exercise; if we have doubts about your identity, we may ask you to prove it. We will reply within one month.
If you believe your rights have not been properly handled, you may lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).
8. Minors
This website is not aimed at children under 14. If you are under 14, please do not send us data without the consent of your parent or guardian.
9. Automated decisions and security
We do not make automated decisions or create profiles with your data. We apply reasonable technical and organisational measures to protect your data (encrypted HTTPS connection, restricted access to submissions).