Legal
Privacy Policy
How we collect, use and protect personal data when you visit our website or contact us.
This Privacy Policy explains how personal data is collected, used and protected when you visit WeBuildYourSoftware.com, contact us or submit a project inquiry.
1. Data Controller
The data controller responsible for processing personal data on this website is:
3D CGI Studio S.L.
Carretera de Churra 55
30007 Murcia
Spain
VAT ID: ESB25996109
Represented by:
Uwe Kreuzahler
Managing Director
Website:
https://webuildyoursoftware.com2. General Information
We take the protection of your personal data seriously.
We process personal data in accordance with the General Data Protection Regulation (GDPR), applicable Spanish data protection legislation and other applicable data protection regulations.
Personal data means any information relating to an identified or identifiable natural person. This includes information such as names, email addresses, telephone numbers, IP addresses and information submitted through our contact or project inquiry forms.
3. Website Access and Server Logs
When you visit this website, the web server may automatically collect technical information provided by your browser.
This may include:
IP address
Date and time of access
Requested page or file
Referrer URL
Browser type and browser version
Operating system
Device information
Hostname of the accessing device
HTTP status code
Amount of data transferred
This information is processed to deliver the website, maintain its technical stability, identify errors and protect the website against misuse and security threats.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and technically correct operation of the website.
Server log files are deleted when they are no longer required for security or operational purposes, unless longer retention is necessary to investigate a security incident or comply with a legal obligation.
4. Contact and Project Inquiries
When you contact us by email or through a form on this website, we process the information you provide in order to respond to your inquiry.
Depending on the form and the information you submit, this may include:
Name
Email address
Telephone number
Company name
Preferred contact method
Project type
Project description
Budget information
Preferred timeframe
Uploaded files
Other information included in your message
Mandatory fields are identified as such in the respective form. Without the required information, we may be unable to process your inquiry.
If your inquiry concerns a possible contract or services that you would like us to provide, processing is based on Article 6(1)(b) GDPR.
For general inquiries, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is responding to inquiries and communicating with prospective clients, customers, partners and other website visitors.
If consent is specifically requested, processing is based on Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
Information submitted through a contact form may be transmitted to us by email and may also be temporarily stored within the website system for technical delivery, security or spam-prevention purposes.
Please do not submit sensitive personal information or confidential business information unless it is necessary for evaluating your inquiry.
5. Uploaded Files
If a project inquiry form allows you to upload files, we process those files exclusively for reviewing and responding to your request.
Uploaded files may contain personal data or confidential information. Please only upload information that is necessary for the requested evaluation.
Files submitted as part of an inquiry are deleted when they are no longer required for handling the inquiry, unless continued storage is necessary for contractual, evidentiary or statutory purposes.
6. Communication by Email
If you communicate with us by email, the transmitted information is processed by our email systems and hosting providers.
Email communication may involve the processing of:
Sender and recipient addresses
Date and time of communication
Subject line
Message content
Attachments
Technical delivery information
The legal basis depends on the nature of the communication and is generally Article 6(1)(b) GDPR for pre-contractual or contractual communication or Article 6(1)(f) GDPR for general business communication.
Please note that ordinary email communication may not be fully protected against unauthorized third-party access. Do not send highly confidential information by unencrypted email.
7. Hosting
This website is hosted by an external hosting provider.
The hosting provider processes technical data, including IP addresses, server log information and other information required to operate and secure the website.
The hosting provider acts on our behalf as a processor where required by applicable data protection law.
Processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and efficient provision of this website.
A data processing agreement has been concluded with the hosting provider where legally required.
8. Cookies and Similar Technologies
This website may use cookies and similar technologies.
Cookies are small text files stored on your device. They may be necessary for the technical operation of the website or used, with your consent, for optional functions such as analytics or embedded external content.
Essential cookies
Essential cookies are required for functions such as:
Website security
Form processing
Cookie-consent management
Language selection
Session management
Prevention of misuse
Essential cookies are processed on the basis of Article 6(1)(f) GDPR and, where applicable, the relevant rules governing access to information stored on a user’s device.
Optional cookies
Analytics, marketing and other non-essential cookies are only activated after you have provided the necessary consent.
The legal basis is Article 6(1)(a) GDPR.
You may withdraw or modify your consent at any time through the Cookie Settings link in the website footer. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
You can also configure your browser to block or delete cookies. Disabling essential cookies may restrict certain website functions.
9. Language Selection and TranslatePress
This website may use TranslatePress to provide content in multiple languages.
TranslatePress may store a cookie or similar browser information to remember the language selected by the visitor. This information is used exclusively to display the website in the selected language.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is providing the website in the language selected by the visitor.
Where translation functions are processed locally within this website, no personal data is transmitted to an external translation service solely because a visitor changes the displayed language.
10. Spam Protection and Website Security
We use technical and organizational measures to protect forms and the website against spam, automated submissions, misuse and attacks.
In this context, information such as IP addresses, request timestamps, browser characteristics and form-submission data may be processed.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is protecting the website and our communication channels from misuse, fraud, spam and security threats.
11. Analytics
We may use analytics technologies to understand how visitors use our website and to improve its content, structure and performance.
Analytics services that are not strictly necessary will only be activated after the visitor has provided consent through the cookie settings.
We currently use Google Analytics (GA4), provided by Google Ireland Limited, for this purpose. Depending on the configured analytics service, the following information may be processed:
Visited pages
Date and time of visits
Approximate location
Browser and device information
Referrer information
Interactions with website content
Truncated or complete IP address
Cookie or device identifiers
The legal basis is Article 6(1)(a) GDPR.
Consent may be withdrawn at any time through the Cookie Settings link.
12. Embedded Content and External Services
Pages on this website may contain content or functions supplied by third parties, such as videos, maps, social-media links, scheduling services or externally hosted media.
When external content is loaded, the third-party provider may receive information including your IP address, browser data and the page you visited.
Where such content is not technically necessary, it will only be loaded after you have provided consent. The legal basis is Article 6(1)(a) GDPR.
Ordinary links to external websites do not automatically transfer data to those websites. Data is transferred only after you follow the respective link.
Each external provider is responsible for its own processing activities. Please consult the provider’s privacy policy for further information.
Vimeo video
Our home page offers a short introduction video. The video is hosted by Vimeo.com, Inc., New York, USA (“Vimeo”). The page itself only contains a link that opens the video in a pop-up window.
The Vimeo player is not loaded when you open a page. No connection to Vimeo is established until you click the video link and the pop-up window opens. Vimeo then receives your IP address, browser and device information, the address of the page from which you opened the video and the time of the request.
We use Vimeo’s do-not-track setting for the player. With this setting Vimeo is asked not to track your viewing behavior. Vimeo may still set cookies that are required for the security and operation of the player.
By clicking the video link and opening the video window, you request the video and consent to this data transfer. The legal basis is Article 6(1)(a) GDPR. You can withdraw your consent at any time by closing the video window and not opening the video again.
Vimeo is based in the USA. Vimeo states that it participates in the EU-U.S. Data Privacy Framework and uses the European Commission’s Standard Contractual Clauses where appropriate (see section 15).
Further information is available in Vimeo’s privacy policy: vimeo.com/privacy.
13. Social-Media Links
This website may include links to our profiles on third-party social-media platforms.
These links do not establish a connection with the respective platform merely because you visit our website. A connection is only established after you click the link.
When visiting an external social-media platform, the platform provider’s privacy policy and terms apply.
14. Recipients of Personal Data
Personal data may be disclosed to service providers when this is necessary to operate the website, respond to inquiries or fulfil contractual and legal obligations.
Possible recipients include:
Hosting providers
Email providers
Website maintenance and technical support providers
IT security providers
Form-processing and spam-prevention providers
Analytics providers, where consent has been given
Video hosting providers (Vimeo), where you open the video
Legal, tax or professional advisers
Public authorities where disclosure is legally required
Service providers acting on our behalf are contractually required to process personal data only in accordance with our instructions and applicable data protection law.
We do not sell personal data.
15. International Data Transfers
We seek to process personal data within the European Economic Area whenever reasonably possible.
Some service providers may process personal data outside the European Economic Area or may be operated by companies based in countries outside the European Economic Area.
Where personal data is transferred to a country without an adequate level of data protection, we use appropriate safeguards as required by Articles 44–49 GDPR. These may include adequacy decisions, the European Commission’s Standard Contractual Clauses and additional technical or organizational safeguards.
Where a transfer is based on consent, the legal basis is Article 49(1)(a) GDPR.
Information about specific international transfers will be provided in the section describing the relevant external service.
16. Data Security
We implement appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access.
These measures may include:
TLS/HTTPS encryption
Access controls
Secure password storage
Role and permission management
Firewall and security systems
Software and security updates
Backup procedures
Measures against unauthorized login attempts
Restricted administrative access
No internet transmission or storage system can guarantee absolute security. Our safeguards are therefore reviewed and adapted where appropriate.
17. Storage Duration
We retain personal data only for as long as it is necessary for the purpose for which it was collected.
Inquiries are generally retained for the duration required to process and follow up on the communication.
If an inquiry results in a contractual relationship, relevant information may be retained for the duration of the contract and for any subsequent statutory retention period.
Business and tax documents may be retained for the periods required under applicable commercial and tax law.
Data processed on the basis of consent is retained until consent is withdrawn, unless another legal basis or statutory retention requirement applies.
When personal data is no longer required and no statutory retention obligation applies, it is deleted or anonymized.
18. Legal Bases for Processing
Depending on the relevant processing activity, we process personal data on the following legal bases:
Article 6(1)(a) GDPR: consent
Article 6(1)(b) GDPR: performance of a contract or steps taken before entering into a contract
Article 6(1)(c) GDPR: compliance with a legal obligation
Article 6(1)(f) GDPR: legitimate interests pursued by us or a third party
Where processing is based on legitimate interests, our interests generally include operating and securing the website, responding to inquiries, maintaining business communications and protecting our systems against misuse.
19. Your Data Protection Rights
Subject to the applicable legal requirements, you have the following rights:
Right of access under Article 15 GDPR
Right to rectification under Article 16 GDPR
Right to erasure under Article 17 GDPR
Right to restriction of processing under Article 18 GDPR
Right to data portability under Article 20 GDPR
Right to object under Article 21 GDPR
Right to withdraw consent under Article 7(3) GDPR
Right to lodge a complaint with a supervisory authority under Article 77 GDPR
Right to object
If we process your personal data on the basis of Article 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation.
If personal data is processed for direct marketing purposes, you have the right to object at any time to processing for such marketing.
Withdrawal of consent
If processing is based on your consent, you may withdraw that consent at any time with effect for the future.
Withdrawal does not affect the lawfulness of processing carried out before the consent was withdrawn.
20. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority.
The supervisory authority responsible for data protection in Spain is:
Agencia Española de Protección de Datos (AEPD)
Calle Jorge Juan 6
28001 Madrid
Spain
Website:
https://www.aepd.esYou may also contact another supervisory authority in the European Union, particularly in the country of your habitual residence, place of work or place of the alleged infringement.
21. Automated Decision-Making
We do not use personal data collected through this website for automated decision-making or profiling that produces legal effects or similarly significantly affects you.
22. Obligation to Provide Personal Data
You are not legally required to provide personal data when visiting this website.
However, certain information may be necessary when submitting a contact or project inquiry. Without the required information, we may be unable to respond to or process your request.
23. Changes to This Privacy Policy
We may update this Privacy Policy when the website, our services, legal requirements or the technologies we use change.
The version published on this website at the time of your visit applies.
We recommend reviewing this Privacy Policy periodically.
24. Data Protection Contact
For questions concerning this Privacy Policy, the processing of your personal data or the exercise of your rights, please contact:
3D CGI Studio S.L.
Carretera de Churra 55
30007 Murcia
Spain
Version: 1.1
Last updated: October 2026
English
Deutsch
Español