Privacy policy

Last updated: October 17, 2026

1. Who is the controller?

• Controller: Andrés Felipe González Builes (trading as K3A SOLUTIONS)
• Tax ID (NIF): 61045750R
• Address: C/ Juan Manuel Durán González 52, 35010 Las Palmas de Gran Canaria, Spain
• Contact: admin@k3asolutions.com · +34 637 243 230

2. What data do we process, and what for?

a) If you browse the website

With your permission we use Google Analytics to know which pages get visited and Google Ads to know whether you arrived from an ad.

• Data: cookie identifier, pages viewed, source of the visit, technical browser data and an approximate location based on IP.
• Legal basis: your consent, which you give in the cookie notice and can withdraw at any time.

Measurement is provided by Google Ireland Limited. Its tag loads on every visit, like any resource a website requests from another server, and through that connection Google receives your IP address and your browser's technical data. Google Analytics uses it to derive a coarse location and does not store it; that lookup runs on servers in the European Union.

Cookies and the measurement itself require your permission. Until you give it, the tag runs in a restricted mode and neither stores nor reads anything on your device. If you do give it, the cookies described in the cookie policy are switched on.

We also keep our own counter of visits and clicks that uses no cookies and does not store your IP, nor any data that could identify you: it is an aggregate count. Since there is no personal data, it falls outside this policy, and is mentioned for transparency.

b) If you talk to our artificial intelligence agent

The agent answers questions and collects quote requests. It lives at agentes.k3asolutions.app.

• Data: whatever you choose to write —usually your name, phone or email and what you tell us about your business— and the content of the conversation.
• Purpose: to answer your question, prepare a quote and, if you ask for it, schedule a call.
• Legal basis: taking steps at your request prior to entering into a contract (art. 6.1.b GDPR). You write to ask us for something, and we process it to give you that.

🔑 Write only what is needed. There is no need —and we ask you not to— to provide health data, political or religious views, third-party data, or access credentials to any system.

c) If you are a client

• Data: identification and billing details, and whatever is needed to provide the service.
• Legal basis: performance of the contract and compliance with legal obligations in tax and accounting matters.

d) If you write to us on social media

We have profiles on Instagram and TikTok. If you interact with them, we process the data the platform itself shows us, and only to reply to you. The platform is the controller of its own processing, under its own terms, which we do not control.

3. How long do we keep your data?

We keep your data for as long as it is necessary for the purpose you gave it to us for and, afterwards, for the statutory limitation periods that allow us to handle a claim or meet our tax and accounting obligations —up to six years—. Once those elapse, it is deleted.

Conversations with the agent that do not lead to a commercial relationship are kept for as long as they may be useful to handle your request, and are deleted afterwards.

Cookies last for the periods set out in the cookie policy.

You can ask us to delete your data at any time. Please note that, for technical reasons, deleted data may remain for a few days in backups until those are overwritten; during that time it is not used for anything.

4. Who else accesses your data?

We do not sell or share your data. It is only accessed by the providers we need in order to operate, as processors and under contract:

• Hostinger — hosting of this website.
• Google Cloud — servers where the agent runs, and backup storage.
• Google (Vertex AI) — the language model that generates the agent's answers.
• Google Ireland Limited (Google Analytics) — website measurement, only if you allow it.

With Google Ads the relationship is different: under its terms, Google and we act as independent controllers of advertising measurement data, not as controller and processor. Each decides on its own what it uses them for, and Google describes its own processing in its privacy policy.

Access may also be given to professional service providers —tax and accounting advisors— and to public authorities where the law requires it.

5. Does your data leave the European Union?

Yes: conversations with the agent are processed on Google servers in the United States, because that is where the technology we use is available.

For measurement, the counterparty is Google Ireland Limited, in the European Union. Google may process that data in other countries where its organization has facilities.

Those transfers rely on Google LLC being certified under the EU-U.S. Data Privacy Framework, recognized by the European Commission as providing an adequate level of protection, and additionally on the Commission's standard contractual clauses included in our contract with Google.

In the service we use, Google acts as a processor and does not use the content of the conversations to train its models.

6. Automated decisions

The agent generates answers automatically, but it does not make decisions that produce legal effects concerning you or similarly significantly affect you: it grants or denies nothing, sets no binding prices and builds no profiles. Any real decision —accepting a project, issuing a quote— is made by a person.

7. What rights do you have?

You may exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and portability, as well as withdraw any consent you have given.

To do so, write to admin@k3asolutions.com stating which right you are exercising. We will reply within one month.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security

We apply reasonable technical and organizational measures to protect your data: encryption in transit, restricted access and backups. No system is infallible, but we work to keep the risk as low as possible.

9. Changes to this policy

We may update it if our services or the applicable rules change. The version that applies is the one published at any given time, bearing the date shown above.