Experienced an incident?
Dasenda
Get an assessment
CareersPress kit
Part ofDordio & Associates

© 2026 Dasenda

Privacy Policy

How we collect, use, and protect your personal data.

Data Controller

I

DORDIO & ASSOCIATES, S.L. (tax ID B81738551), with registered office at Calle Hermanos García Noblejas, 39, 28037, Madrid, Spain, is the data controller for personal data collected through www.dasenda.com.

You may contact us at info@dasenda.com for any question relating to your personal data.

Data we collect

II

Contact data

When you write to us or submit the contact form, we collect name, email address, and company. We only use this data to handle your enquiry.

Document downloads

When you request a document (for example, a sector brochure), we collect name, email address and, if you provide it, phone number, together with the date of the request and the IP address it was made from, so that we can evidence your acceptance.

Browsing data

With your prior consent, we collect browsing data via Google Analytics 4 and Vercel Analytics: pages visited, device type, browser, approximate country- or city-level location, referring page, and actions such as submitting a form.

Google Analytics assigns a pseudonymous identifier stored in a cookie. This is not anonymous data in the strict sense: it is pseudonymised data subject to GDPR, although it does not allow us to learn your identity. We do not cross-reference it with the contact data you submit through our forms.

Purpose and legal basis

III

Enquiry management

We process your contact data solely to respond to your enquiries. Legal basis: legitimate interest (Art. 6.1.f GDPR).

Sending requested documents

We use your data to email you the document you requested and, where you indicate so, to contact you about it. Legal basis: steps taken at your request prior to entering into a contract (Art. 6.1.b GDPR).

Commercial communications

Only if you expressly tick the corresponding box will we send you communications about cybersecurity and our services. Legal basis: consent (Art. 6.1.a GDPR and Art. 21 of the Spanish LSSI). You can withdraw it at any time through the unsubscribe link in every email or by writing to info@dasenda.com.

Web analytics

We process browsing data to understand which content is useful and to improve the site. Legal basis: consent (Art. 6.1.a GDPR), which you can withdraw at any time via 'Manage cookies' in the footer.

No behavioural advertising or profiling with legal effects is carried out. Google Signals and ad personalisation are disabled in our configuration.

Retention

IV

Contact data is retained for as long as necessary to handle your request and, thereafter, for the applicable legal limitation period.

Data from document requests is kept for as long as it is useful to follow up that request and, at most, two years from the last interaction. Data processed for commercial purposes is kept until you withdraw your consent.

Google Analytics data is retained for the period configured on the property (2 months by default, extendable to 14), after which Google deletes it automatically. The resulting aggregated reports do not permit individual identification and are kept indefinitely.

Vercel Analytics data is aggregated and anonymised, and is not subject to personal data retention periods.

Your rights

V

Under GDPR, you have the right to access, rectify and erase your data ('right to be forgotten'), to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise your rights, write to us at info@dasenda.com. You also have the right to lodge a complaint with the competent supervisory authority.

International transfers

VI

Vercel, Inc. processes data on servers inside and outside the EEA with appropriate GDPR safeguards (standard contractual clauses and the EU–US Data Privacy Framework).

MailerLite, Inc. acts as data processor for sending documents and, where applicable, commercial communications. Data is hosted in data centres in the European Union; any processing outside the EEA relies on standard contractual clauses approved by the European Commission.

Google Ireland Limited acts as data processor for web analytics. Traffic originating in the EEA is routed through servers in the European Union before processing, and Google LLC may process data in the United States under the EU–US Data Privacy Framework and standard contractual clauses.

You can find the detail of the cookies used in our Cookie Policy.

Last updated: October 2026