Skip to content
EN
EspañolEnglishCatalà
← Home

Privacy policy

som-os.dev · Last updated: 29 June 2026

I. Privacy and personal data protection policy

In accordance with applicable legislation, Som-os.dev | AI software agency (hereinafter also the Website) undertakes to adopt the necessary technical and organisational measures, according to the level of security appropriate to the risk of the data collected.

Laws covered by this privacy policy

This privacy policy is adapted to current Spanish and European regulations on the protection of personal data online. Specifically, it complies with the following provisions:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to personal data processing and the free movement of such data (GDPR).
  • Organic Law 3/2018 of 5 December on Personal Data Protection and the guarantee of digital rights (LOPD-GDD).
  • Royal Decree 1720/2007 of 21 December approving the implementing regulation of Organic Law 15/1999 of 13 December on Personal Data Protection (RDLOPD).
  • Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the data controller

The controller of personal data collected by Som-os.dev | AI software agency is: Adrián Colom Palacios, with tax identification number (NIF): 43470755L (hereinafter the Controller). Their contact details are:

  • Address: Carrer Selleters, 25, 07300 Inca, Illes Balears
  • Telephone: 621 08 57 06
  • Email: hola@som-os.dev

Personal Data Register

In compliance with the GDPR and LOPD-GDD, we inform you that personal data collected by Som-os.dev | AI software agency through the forms on its pages will be incorporated into and processed in our records to facilitate, expedite and fulfil commitments between Som-os.dev | AI software agency and the User, maintain the relationship established through forms completed by the User, or respond to their request or enquiry. Likewise, under the GDPR and LOPD-GDD, unless the exception in Article 30.5 of the GDPR applies, a record of processing activities is maintained specifying, according to their purposes, the processing activities carried out and the other circumstances required by the GDPR.

Principles applicable to personal data processing

The User's personal data will be processed according to the principles set out in Article 5 of the GDPR and Article 4 et seq. of Organic Law 3/2018 of 5 December on Personal Data Protection and the guarantee of digital rights:

  • Lawfulness, fairness and transparency: the User's consent will always be required following fully transparent information about the purposes for which personal data is collected.
  • Purpose limitation: personal data will be collected for specified, explicit and legitimate purposes.
  • Data minimisation: personal data collected will be strictly limited to what is necessary for the purposes of processing.
  • Accuracy: personal data must be accurate and always kept up to date.
  • Storage limitation: personal data will only be kept in a form allowing the User's identification for as long as necessary for the processing purposes.
  • Integrity and confidentiality: personal data will be processed in a manner ensuring its security and confidentiality.
  • Accountability: the Controller is responsible for ensuring compliance with the principles above.

Categories of personal data

The categories of data processed by Som-os.dev | AI software agency are limited to identification data. No special categories of personal data within the meaning of Article 9 of the GDPR are processed.

Legal basis for personal data processing

The legal basis for personal data processing is consent. Som-os.dev | AI software agency undertakes to obtain the User's express, verifiable consent to processing their personal data for one or more specific purposes.

The User may withdraw consent at any time. Withdrawing consent will be as easy as giving it. As a general rule, withdrawing consent will not affect use of the Website.

Whenever the User must or may provide data through forms to make enquiries, request information or for reasons related to Website content, they will be informed if any fields are mandatory because they are essential to properly perform the requested operation.

Purposes of personal data processing

Personal data is collected and managed by Som-os.dev | AI software agency to facilitate, expedite and fulfil commitments between the Website and the User, maintain the relationship established through forms completed by the User or respond to a request or enquiry.

Data may also be used for commercial personalisation, operational and statistical purposes and activities within the corporate purpose of Som-os.dev | AI software agency, as well as data extraction and storage and marketing studies to adapt the Content offered to the User and improve the Website's quality, operation and navigation.

When personal data is obtained, the User will be informed of the specific processing purpose or purposes; that is, how the collected information will be used.

Personal data retention periods

Personal data will only be retained for the minimum time necessary for its processing purposes and, in all cases, only for the following period: as long as necessary for the purposes for which it was collected, or until the User requests deletion.

When personal data is obtained, the User will be informed of the retention period or, where that is not possible, the criteria used to determine it.

Recipients of personal data

The User's personal data will not be shared with third parties.

In all cases, when personal data is obtained, the User will be informed of its recipients or categories of recipients.

Personal data of minors

In accordance with Article 8 of the GDPR and Article 7 of Organic Law 3/2018 of 5 December on Personal Data Protection and the guarantee of digital rights, only persons over 14 may lawfully consent to processing their personal data by Som-os.dev | AI software agency. For children under 14, parental or guardian consent is required, and processing is lawful only to the extent they have authorised it.

Confidentiality and security of personal data

Som-os.dev | AI software agency undertakes to adopt the necessary technical and organisational measures, according to the level of security appropriate to the risk of the data collected, to ensure personal data security and prevent accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or unauthorised disclosure or access.

The Website has an SSL (Secure Socket Layer) certificate ensuring personal data is transmitted securely and confidentially, as transmission between the server and User in both directions is fully encrypted.

However, as Som-os.dev | AI software agency cannot guarantee the Internet's invulnerability or the complete absence of hackers or others gaining fraudulent access to personal data, the Controller undertakes to notify the User without undue delay of a personal data breach likely to pose a high risk to natural persons' rights and freedoms. Under Article 4 of the GDPR, a personal data breach is any security breach leading to accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or unauthorised disclosure of or access to such data.

The Controller will treat personal data as confidential and undertakes to inform and ensure, through legal or contractual obligations, that this confidentiality is respected by employees, associates and anyone given access to the information.

Rights arising from personal data processing

The User holds the following rights in relation to Som-os.dev | AI software agency and may exercise them against the Controller, as recognised by the GDPR and Organic Law 3/2018 of 5 December on Personal Data Protection and the guarantee of digital rights:

  • Right of access: The User's right to obtain confirmation of whether Som-os.dev | AI software agency is processing their personal data and, if so, information about the specific data and processing carried out or being carried out, including available information about the data's origin and recipients of disclosures made or planned.
  • Right to rectification: The User's right to have inaccurate personal data corrected or, taking account of processing purposes, incomplete data completed.
  • Right to erasure (“the right to be forgotten”): Unless applicable legislation provides otherwise, the User's right to obtain deletion of personal data when it is no longer necessary for the purposes for which it was collected or processed; the User withdraws consent and there is no other legal basis; the User objects and no legitimate ground remains for processing; the data was unlawfully processed; deletion is required by a legal obligation; or the data was obtained through a direct offer of information society services to a child under 14. In addition to deleting data, the Controller must, taking account of available technology and implementation costs, take reasonable steps to inform controllers processing that data of the data subject's request to erase links to it.
  • Right to restriction of processing: The User's right to restrict personal data processing. Restriction may be obtained when the User disputes accuracy; processing is unlawful; the Controller no longer needs the data but the User needs it for claims; or the User has objected to processing.
  • Right to data portability: Where processing is automated, the User may receive their personal data from the Controller in a structured, commonly used, machine-readable format and transmit it to another controller. Where technically feasible, the Controller will transmit the data directly to the other controller.
  • Right to object: The User's right to prevent or stop the processing of their personal data by Som-os.dev | AI software agency.
  • Right not to be subject to a decision based solely on automated processing, including profiling: The User's right not to be subject to an individual decision based solely on automated personal data processing, including profiling, unless applicable legislation provides otherwise.

The User may therefore exercise these rights by writing to the Controller with the reference “RGPD-som-os.dev”, stating their first and last names and enclosing a copy of their national ID (DNI). Where representation is allowed, the representative must also be identified in the same way, with a document proving representation. The DNI photocopy may be replaced by another legally valid means of proving identity.

  • The User's first and last names and a copy of their national ID (DNI) or passport.
  • Request stating the specific reasons or information to be accessed.
  • Address for notifications.
  • Date and applicant's signature.
  • Any document substantiating the request.

This request and all attached documents may be sent to the following address and/or email:

  • Postal address: Carrer Selleters, 25, 07300 Inca, Illes Balears
  • Email address: hola@som-os.dev

Links to third-party websites

The Website may include hyperlinks or links to third-party websites other than Som-os.dev | AI software agency, which are therefore not operated by it. Those websites' owners have their own data protection policies and are responsible for their own records and privacy practices.

Complaints to the supervisory authority

If the User considers there is a problem or breach of applicable regulations in the processing of their personal data, they have the right to an effective judicial remedy and to lodge a complaint with a supervisory authority, particularly in the State of their habitual residence, workplace or the alleged breach. In Spain, the supervisory authority is the Spanish Data Protection Agency (https://www.aepd.es/).

II. Acceptance of and changes to this privacy policy

The User must have read and agreed to the personal data protection conditions in this Privacy Policy and consent to their personal data processing before the Controller can process it in the stated manner, for the stated periods and purposes. Use of the Website implies acceptance of its Privacy Policy.

Som-os.dev | AI software agency reserves the right to modify its Privacy Policy at its discretion or as a result of legislative changes, case law or guidance from the Spanish Data Protection Agency. Changes or updates will not be explicitly notified to the User. The User is advised to consult this page periodically to stay informed of the latest changes or updates.

This Privacy Policy was updated to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to personal data processing and the free movement of such data (GDPR), and Organic Law 3/2018 of 5 December on Personal Data Protection and the guarantee of digital rights.

This document was created using the generator of free website legal texts online on 29/6/2026.