Privacy policy

1. Data controller

• Company: Revenue Optim S.L.
• Address: Madrid, Spain
• Contact email: hola@revenueoptim.com
• Website: www.revenueoptim.com

This policy describes how we process the personal data of people who visit www.revenueoptim.com and of people who write to us or fill in any of its forms, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).

2. What data we process and where it comes from

We only process the data you give us yourself, through these three parts of the site:

• Downloadable resources. The email address you enter to receive the playbook, together with the date and the consent box you ticked.
• Self-assessment. The statements you tick are processed anonymously: they are not linked to any data that could identify you. If you ask for the full diagnosis by email, your address is linked to the statements you ticked and to the text we send you, because that is what we need to write it and to pick the conversation up again if you reply.
• Booking the call.The details you give us when you book the fit call in the Google calendar (name, email and anything you want to tell us), which we receive with the booking. The booking is made under Google’s terms.

When you email us we process your address, your name if you include it and the content of the message. We do not collect special categories of data or data from children under fourteen.

In addition, as you browse the site each page view is recorded in aggregate: the page, the website you came from, the country and the type of browser, operating system and device. To tell visits apart, an identifier calculated from the request is used and discarded within 24 hours; no cookie is set, nothing is stored in your browser, and your IP address is not kept.

3. What we use it for and on what legal basis

• To send you the resource or the diagnosis you asked for and to reply to your messages. Legal basis: your consent (Article 6(1)(a) GDPR), which you give by ticking the box on the form, and the steps you ask us to take before entering into a contract (Article 6(1)(b)).
• To prepare and hold the fit call you have booked, with what you tell us when you book it. Legal basis: taking steps at your request before entering into a contract (Article 6(1)(b)).
• To write to you afterwards about the resource or the diagnosis you asked for, if you reply to us or have consented to it. Legal basis: consent (art. 6.1.a). You can withdraw it at any time without affecting what came before.
• To understand, in aggregate and anonymously, which self-assessment statements are most often ticked together. This is not personal data.
• To measure use of the site: how many visits each page gets and where they come from, so we know which content is useful and which is not. Legal basis: legitimate interest (art. 6.1.f), with aggregate data that does not identify you.
• To keep the site secure: limiting the number of submissions per IP address to prevent abuse. Legal basis: legitimate interest (art. 6.1.f). The IP is not stored with your data.

We do not make decisions based solely on automated processing that produce legal effects concerning you, and we do not carry out profiling.

4. Who has access to your data

We do not sell your data or pass it on to third parties. It is processed on our behalf, under a data processing agreement, by the providers that run the site:

• Vercel Inc. (United States): hosting of the site, running the forms and aggregate measurement of visits.
• Resend, Inc. (United States): sending the emails with the resource or the diagnosis.
• Anthropic, PBC (United States): generating the text of the diagnosis from the statements you ticked. It does not receive your email or any data that identifies you.
• Google LLC (United States): the calendar where you book the call, under its own privacy terms.
• Our internal contact management system, where we record requests so that we can handle them.

Providers established outside the European Economic Area offer appropriate safeguards under Chapter V of the GDPR: certification under the EU-U.S. Data Privacy Framework or standard contractual clauses approved by the European Commission.

5. How long we keep it

• Email and answers linked to a request: until you ask us to erase them, and for no more than two years from your last interaction with us.
• Data from a business relationship: for as long as the relationship lasts and, afterwards, for the period required by tax and commercial law.
• Anonymous self-assessment answers: indefinitely, because they do not identify you.
• Visit measurement: the visit identifier is discarded within 24 hours; the aggregate figures are kept indefinitely, because they do not identify you.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent you have given us, by writing to hola@revenueoptim.comwith the subject “Data protection”. We will reply within one month. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency, the Agencia Española de Protección de Datos (www.aepd.es).

7. Cookies

This site does not use analytics, advertising or tracking cookies. It measures visits with Vercel Web Analytics, which sets no cookies and stores nothing in your browser: it counts page views in aggregate, as explained in section 2. The only cookie the site sets is a technical one, and only people who access its administration panel receive it. That is why the notice you see when you arrive is for information only: there is nothing to reject. When you click “Accept”, your browser stores that choice in its local storage, not in a cookie, so that the notice is not shown to you again.

The calendar for booking a call is Google Calendar. On the booking page, where the “Book a call” buttons lead, it loads when you open the page, because opening that page is a request to see it. Under the self-assessment result it does not load until you click “Mostrar la agenda” (show the calendar). Once loaded it is Google content, which may use its own cookies under its privacy policy. If you would rather not load it, you can write to us and we will arrange the booking by email.

8. Security

We apply technical and organisational measures appropriate to the risk: encrypted communications (HTTPS), restricted access to the data, and providers with recognised security certifications.

9. Changes to this policy

If the way we process your data changes, we will update this page and the date shown at the top. We will tell you about any change that affects processing you have already consented to before it takes effect.