STAKKER ES Book an assessment
Call

Privacy policy

Data controller

  • Controller: Samuel Martínez García
  • NIF: 53928594B
  • Address: C/ Ingeniero de la Cierva 4, Málaga, Spain
  • Email: [email protected]
  • Telephone: 624 122 161
  • Trading name: STAKKER SYSTEMS

What data we collect and why

1. Contact form

  • Data: name, email and/or telephone number, business, the service you are interested in, message, language and time zone, and the record of your consents (text accepted, date, IP address and browser).
  • Purpose: to respond to your request, prepare a diagnosis or demo for you and schedule a video call if you ask for one.
  • Legal basis: consent (Art. 6(1)(a) GDPR) and pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
  • Retention: for as long as the commercial relationship lasts; if you do not become a client, 12 months.

2. Telephone, WhatsApp and calls with an AI assistant

  • What we do: we message you on WhatsApp or an artificial intelligence voice assistant calls you (it identifies itself as such and the call is recorded, which we tell you at the start). You can always ask to speak to a person.
  • When: if you tick the option on the form (only after you confirm the number is yours by sending us, via WhatsApp, the code we show you), if you call or write to us yourself, or if during a call you ask us to send you something via WhatsApp; in that message we remind you that you asked us to.
  • Calls to businesses: we may call a business's public telephone number (for example, the one on its Google Maps listing) to introduce our services, on the basis of legitimate interests (Art. 6(1)(f) GDPR), after checking the Spanish Robinson List (do-not-call register). If you tell us not to call you again, we will not contact you again.
  • Legal basis: consent (Art. 6(1)(a) GDPR) or, for calls to businesses, legitimate interests (Art. 6(1)(f) GDPR).
  • Retention: 12 months from the last contact if you do not become a client; your opt-out is kept so that it can be respected.

3. Contractual relationship (clients)

  • Data: name, NIF/CIF, address, email, telephone number, bank details for invoicing.
  • Purpose: management of the contractual relationship, invoicing, provision of the service.
  • Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and legal tax obligations (Art. 6(1)(c) GDPR).
  • Retention: for the duration of the contract and the subsequent statutory periods (4 years for tax purposes, 6 years for commercial purposes).

4. Commercial communications

  • Data: email and/or WhatsApp.
  • Purpose: to send you news, offers and case studies from STAKKER through the channel you have agreed to.
  • Legal basis: express consent (Art. 6(1)(a) GDPR and Art. 21 LSSI (Spanish e-commerce law)), separate from everything else: not accepting this does not change how we handle your request.
  • Opt-out: at any time: reply BAJA (unsubscribe) on WhatsApp, use the link in each email or write to [email protected].

5. Website measurement

We measure visits using our own cookie-free analytics, which does not store your IP address: each visitor is an anonymous identifier that changes every day and we only see aggregated data. Legal basis: legitimate interests in improving the website (Art. 6(1)(f) GDPR). Google Analytics is only activated if you accept its cookies (see the cookie policy).

Who we share your data with

We do not sell or transfer your data. Access is limited to the providers we need in order to deliver the service, who act as processors under contract: Hetzner (servers, Germany and Finland), Meta (WhatsApp), ElevenLabs and Twilio (calls with an AI assistant), OpenAI and Anthropic (AI models), Resend (emails), Google (email and, if you accept it, analytics), Cloudflare (DNS and encrypted backups) and Notion (internal management). Public authorities may also have access where required by law.

Some are located in the USA: transfers are covered by the EU-US Data Privacy Framework or by the European Commission's standard contractual clauses (Arts. 45 and 46 GDPR).

Your rights

As a data subject, you have the right to:

  • Access: find out what data we hold about you.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: request the deletion of your data when it is no longer necessary.
  • Restriction: request that we restrict processing in certain circumstances.
  • Portability: receive your data in a structured, commonly used format.
  • Objection: object to the processing of your data.
  • Withdrawal of consent: at any time, without retroactive effect.

To exercise these rights, send an email to [email protected] stating your full name and the right you wish to exercise. We will respond within a maximum of 30 days.

If you consider that the processing is not appropriate, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

Security measures

  • SSL/TLS encryption on all communications.
  • Restricted access to personal data.
  • Daily backups on European servers.
  • Regular software updates and security patches.
  • Continuous infrastructure monitoring.

Contact

  • Email: [email protected]
  • Telephone: 624 122 161
  • Address: C/ Ingeniero de la Cierva 4, Málaga, Spain

Last updated: 7 October 2026