Privacy policy
Last updated: 10 June 2026
At Systray Solutions, SL we take the protection of your data seriously. This policy explains what personal data we collect through systray.cat, for what purpose, the legal basis on which we process it, and what rights you have over it. It is drafted in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
The controller responsible for processing your data is:
- Company
- Systray Solutions, SL
- Tax ID (CIF)
- B66790387
- Address
- C/ Plà de Baix, 46 Local 3, 08402 Granollers (Barcelona), Spain
- info@systray.cat
- Phone
- +34 93 181 81 32
2. What data we collect
We only process the data you provide voluntarily and the technical data strictly necessary for the website to work and for us to measure its use:
- Contact form
- name, company (optional), email, phone (optional) and the content of your message.
- Product waiting list
- your email address.
- Browsing data
- statistical information about how the website is used (pages visited, device, approximate location derived from your IP), collected only if you accept statistics cookies.
3. Why we use your data and our legal basis
- Answering your enquiry
- we manage and reply to the messages you send through the form or by email. Legal basis: your consent and the application of pre-contractual measures at your request (Art. 6.1.a and 6.1.b GDPR).
- Managing the waiting list
- we notify you when a product launches once you sign up. Legal basis: your consent (Art. 6.1.a GDPR).
- Measuring website use
- we analyse in aggregate how the site is used in order to improve it. Legal basis: your consent when accepting statistics cookies (Art. 6.1.a GDPR).
- Meeting legal obligations
- where a law requires us to retain or disclose certain information. Legal basis: legal obligation (Art. 6.1.c GDPR).
We do not make automated decisions with legal effects, nor do we build profiles from your data.
4. How long we keep your data
- Enquiry data: while we handle your request and, afterwards, for as long as needed to address any liability arising from the contact.
- Waiting list: until the product launches or until you ask to be removed, whichever comes first.
- Statistical data: for the retention period configured in the analytics tool.
Once the purpose has been fulfilled, we block the data for the applicable legal periods and then securely delete it.
5. Who we share your data with
We do not sell your data or share it with third parties for their own purposes. We do work with providers that process data on our behalf (data processors), under contract and with safeguards in accordance with Art. 28 GDPR:
- Web3Forms
- processes form submissions and forwards them to us by email (provider based in the USA).
- Google (Google Analytics and Google Fonts)
- usage analytics and font serving. When fonts load, your IP address is shared with Google.
- Email provider
- Microsoft 365 (Microsoft Ireland Operations Ltd) — receives and stores the messages you send so we can reply.
- Web hosting provider
- IONOS (IONOS SE, Germany) — hosts the website and logs technical access data.
We may also disclose data to public authorities where required by law.
6. International transfers
Some of our providers (such as Web3Forms or Google) may process data outside the European Economic Area, mainly in the USA. In such cases, the transfer relies on the safeguards provided for by the GDPR: the EU-US Data Privacy Framework adequacy mechanism where the provider is certified, and/or the Standard Contractual Clauses approved by the European Commission, together with additional security measures.
7. Your rights
You may exercise the following rights over your data at any time:
- Access
- find out what data of yours we process.
- Rectification
- correct inaccurate or incomplete data.
- Erasure
- ask us to delete your data when it is no longer needed.
- Objection
- object to a specific processing activity.
- Restriction
- ask us to restrict processing in certain cases.
- Portability
- receive your data in a structured, commonly used format.
- Withdraw consent
- at any time, without affecting the lawfulness of processing carried out beforehand.
8. How to exercise your rights and complain
To exercise any of these rights, email us at info@systray.cat stating the right you wish to exercise. We may ask you to verify your identity. We will respond within the timeframes set by law.
If you believe we have not handled your request properly, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid, Spain — www.aepd.es.
10. Data security
We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration: encrypted connection (HTTPS), access control, backups and selection of providers offering adequate safeguards.
11. Minors
Our website and forms are aimed at businesses and professionals, not minors. In accordance with Article 7 of the LOPDGDD, we only process data provided by people over the age of 14. If you are under 14, do not provide us with your data without the consent of your parents or guardians. If we detect that we have collected data from a child under 14 without such authorisation, we will delete it.
12. Changes to this policy
We may update this policy to reflect legal changes or changes to how the website works. We will always publish the current version on this page, along with its last-updated date.