Privacy policy
What data this site processes, and what it does not.
Last updated: 31 August 2026
This is a courtesy translation. The Spanish version is the binding one: Política de privacidad.
Data controller
Occam Digital Solutions, S.L., tax ID B00000000, registered office in Spain. Contact: contacto@occam-ds.com.
What data this site collects
The server logs the technical data needed to deliver and protect the site, such as IP address, user agent and requested resource. If you accept analytics cookies, Google Analytics also collects information about pages viewed, sessions, device, browser and approximate location.
Analytics is disabled by default: the Google tag is not downloaded and no information is transmitted until you accept it. We use no advertising cookies, build no commercial profiles and share no data for advertising purposes.
Fonts are served from this same domain, so your browser makes no requests to third-party servers when loading the page.
We also process the data you voluntarily type into the contact form.
Web analytics
With your consent, we use Google Analytics 4, provided by Google Ireland Limited, to understand in aggregate how many people visit the site, which pages they view and what kind of device they use. The legal basis is your consent (art. 6.1.a GDPR), which you may withdraw at any time through “Cookie settings” in the site footer.
Google signals and advertising personalisation are disabled. Analytics information is not used to display adverts and is not combined on this site with contact-form data.
Audit request form
The fields are name, company, sector and email address. On submission, that data travels to a service of ours which forwards it by email to the owner’s mailbox. It is not stored in any database on the site and is not used for any other purpose.
The purpose is to answer your request and, where applicable, to prepare the audit proposal. The legal basis is the application of pre-contractual measures at your request (art. 6.1.b GDPR).
We keep that correspondence for the duration of the relationship and afterwards for the applicable statutory limitation periods. If the request does not lead to a commercial relationship, it is deleted after one year.
Filling in the form is optional: you can always write directly to the address shown on the contact section.
Processors
To deliver the form to our mailbox we use Resend (Plus Five Five, Inc., United States) as the email sending provider, and the mailbox itself is hosted with the owner’s email provider. Both act as data processors, under an agreement compliant with art. 28 GDPR, and do not use the data for their own purposes.
When you accept analytics, Google Ireland Limited provides Google Analytics under its data processing terms.
Client data during a project
During an audit or a development project we may access data in your systems, including personal data of your employees or customers. In that case we act as a data processor under the corresponding agreement (art. 28 GDPR), with documented instructions, a duty of confidentiality and the agreed security measures. This policy does not cover that processing: the contract signed with each client does.
Hosting
The site is hosted by Railway Corporation (United States) which, like any web server, logs technical connection data — IP address, user agent, requested resource — in order to provide and protect the service. The legal basis is our legitimate interest in the security and availability of the site.
Railway acts as a data processor on the owner’s behalf, under the agreement required by article 28 GDPR. The controller for that processing is the owner of this site: choosing a provider does not move the responsibility onto the provider.
International transfers
The technology providers identified above may process data outside the European Economic Area. Where an international transfer takes place, it relies on an applicable adequacy decision — including the EU-U.S. Data Privacy Framework — or on standard contractual clauses approved by the European Commission.
You may ask us for further information about those safeguards at the contact address.
Your rights
You can request access, rectification, erasure, restriction, objection and portability by writing to contacto@occam-ds.com. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe the processing does not comply with the regulations.
Changes
We will update this policy before adding a new purpose or processing activity and will show the date of the change.