Legal
Privacy policy
This is a translation; the Spanish version prevails.
Version 2.0 · Last reviewed: 11 October 2026
This policy explains how ForgeNEX processes the personal data of people who visit www.forgenex.com and contact us, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
If you have an account for one of our products (panel.forgenex.com), the processing of your account and service data is explained in the panel’s privacy policy and, where applicable, the data processing agreement.
1. Data controller
| Controller | FORGENEX SOLUTIONS S.L.U. |
| Spanish tax ID (NIF) | B05625553 |
| Registered address | Calle Vasco de Gama 49, ground floor, 41006 Seville, Spain |
| Privacy contact | info@forgenex.com · +34 624 816 969 |
ForgeNEX is not required to appoint a data protection officer. Privacy questions can be sent to the email address above.
2. Data we process
- Contact and proposal forms: your name, email address, phone number and company (if you provide them), your message, the page you sent it from and, for calculators, the result and calculator inputs only if you select ‘Attach my result’.
- Calculators: calculations run in your browser. We receive nothing unless you ask us to review the result using the form.
- Communications: what you send us by email, phone or WhatsApp, and our replies.
- Browsing and security: your IP address and the technical data needed to serve and protect the website. To prevent bulk form submissions, we count submissions by IP address for a few minutes without storing them.
- Spam prevention: forms use Cloudflare Turnstile, which analyses technical browser signals to tell people apart from automated programmes.
- Your panel account: if you have signed in to panel.forgenex.com, the website asks the panel through your browser who you are so it can show your name and products in the header. The response stays in your browser; the website does not store it.
- Analytics: only if you enable it in cookie settings, we measure the pages visited, referrer, device and browser type, approximate country and whether a form was submitted, using ForgeNEX Analytics (Umami), hosted on our EU servers. It does not use cookies or store your IP address: data is aggregated and does not identify you.
We do not process special categories of personal data and do not need them to help you. Please do not include them in your messages.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Reply to your enquiry and, if you ask, prepare a proposal. Your message is recorded as an opportunity in ForgeNEX Gestión (CRM) so the person helping you has the context. | Pre-contractual steps at your request (Article 6(1)(b)); if it is only an enquiry, your consent when you submit it (Article 6(1)(a)) |
| Provide the services you subscribe to and manage our relationship | Performance of a contract (Article 6(1)(b)) |
| Protect the website and forms from abuse and spam | Legitimate interest in website security (Article 6(1)(f)) |
| Show your panel account in the header if you have signed in | Legitimate interest in providing the website you requested (Article 6(1)(f)) |
| Measure website usage to improve it (Umami) | Your consent in cookie settings (Article 6(1)(a)); you can withdraw it at any time |
| Meet legal obligations, including tax records and requests from authorities | Legal obligation (Article 6(1)(c)) |
We do not send marketing communications unless you have asked for them. We do not make decisions based solely on automated processing that produce legal effects concerning people.
4. How long we keep data
- Enquiries and proposals: for as long as needed to respond and, if no business relationship follows, for no more than twelve months.
- Customers: for the duration of the relationship and afterwards, restricted for the limitation periods that may apply (generally five years); invoices are kept for six years to meet commercial and tax obligations.
- Technical security logs: for as long as needed for their purpose, up to twelve months unless they are needed to investigate an incident.
5. Who receives the data
We do not sell personal data. Data is shared only as needed with the service providers that act as processors for us, under an agreement that complies with Article 28 of the GDPR:
| Provider | Service | Location | Safeguard for transfers outside the EU |
|---|---|---|---|
| netcup GmbH | Servers hosting the website, ForgeNEX Gestión (CRM), analytics (Umami) and their databases | Germany | — |
| Microsoft Ireland Operations Ltd. | Corporate email (Microsoft 365) | Ireland / EU | — |
| Cloudflare, Inc. | DNS and form spam protection (Turnstile) | US / global network | EU–US Data Privacy Framework and Standard Contractual Clauses |
In addition:
- YouTube: if you load an embedded YouTube video on the website, Google Ireland Ltd. processes data about that viewing under its own policy. Videos do not load until you request them.
- WhatsApp: if you message us on WhatsApp, WhatsApp Ireland Ltd. processes that data as an independent controller under its own policy.
- Social media: links to our social accounts take you to their websites, which have their own policies. This website does not load social media content or trackers.
- Authorities and courts, when required by law.
6. Transfers outside the European Economic Area
The website and ForgeNEX Gestión are served from the EU. Data may leave the EU only when processed by the providers identified as being in the US, and only with a safeguard under Chapter V of the GDPR: the EU–US Data Privacy Framework (adequacy decision of 10 July 2023) or the European Commission’s Standard Contractual Clauses. You can request a copy of these safeguards at info@forgenex.com.
7. Your rights
You can ask ForgeNEX to provide access to, rectify, erase or restrict the processing of your personal data, object to its processing or transfer it, and you can withdraw any consent at any time without affecting earlier processing. Email info@forgenex.com and say which right you want to exercise. If we have reasonable doubts about your identity, we may ask you to verify it. We will respond within one month.
If you believe your data is not being handled correctly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
8. Security
We apply technical and organisational measures appropriate to the risk, including encrypted communications, access controls, spam protection, backups and software updates. If a personal data breach occurs, it will be notified as required by Articles 33 and 34 of the GDPR.
9. Third-party data and children
If you give us another person’s data (for example, a colleague’s), you confirm that you have informed them and are entitled to do so. This website is for businesses and professionals; it is not intended for children.
10. Cookies
How cookies and browser storage are used is explained in the cookie policy.
11. Changes
If this policy changes significantly, we will note the change and the new date on this page.
Version history
- Version 2.0 · 11 October 2026: Identifies the product as ForgeNEX Gestión (CRM included).
- Version 1.0 · 3 October 2026: First version of the new website.