At Rowan Tech, owner of the TuPuntoLimpio brand and service, we take the protection of your personal data seriously. This policy explains how we handle the data we collect through the forms and communications on tupuntolimpio.es, in line with EU Regulation 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
Controller: Rowan Tech
Contact: hola@rowantech.es
Website: tupuntolimpio.es
Scope: Spain (Galicia)
2. Data we collect and purpose
We only process the data you voluntarily provide via the website forms. Specifically:
- Email (mandatory in all forms) — to respond to your request and, if you accept, send you commercial communications.
- Name, phone number, council/municipality and role — only on the personalised demo request form.
- Free-text message — optional, only on the contact form.
- IP address and submission date — recorded technically to prevent abuse (spam, bots).
3. Legal basis
Processing is based on your explicit consent (Art. 6.1.a GDPR), provided by ticking the corresponding box on each form, and on the legitimate interest of Rowan Tech (Art. 6.1.f GDPR) in responding to your request and protecting our systems against abusive use.
4. Retention period
We keep the data for as long as necessary to respond to your request and, if a commercial relationship is established, for the duration of that relationship plus the applicable legal terms (Spanish Commercial Code, tax law). If you only subscribed to receive commercial communications, we will keep your email until you request removal.
5. Commercial communications
If you have explicitly accepted to receive commercial communications (e.g. when requesting access to the citizen demo or submitting the contact form), Rowan Tech may send you information about:
- News, improvements and new TuPuntoLimpio features.
- Success stories, downloadable resources and guides for councils.
- Events, webinars and demos organised by Rowan Tech.
You may withdraw your consent at any time by writing to hola@rowantech.es or using the unsubscribe link included in every communication. Withdrawing consent does not affect the lawfulness of prior processing.
6. Recipients and processors
We do not share your data with third parties except where legally required. We do use technical service providers acting as data processors under contract (Art. 28 GDPR): SMTP email provider (IONOS, hosted in the EU) and the website hosting provider. We do not transfer data internationally outside the EEA.
7. Your rights
As a data subject you may exercise the following rights at any time:
- Access to the data we hold about you.
- Rectification of inaccurate or incomplete data.
- Erasure ("right to be forgotten") when no longer needed.
- Objection to processing, in whole or in part.
- Restriction of processing while a complaint is verified.
- Portability of data to another controller.
To exercise these rights simply write to hola@rowantech.es stating which right you wish to exercise. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es) if you believe processing does not comply with the GDPR.
8. Security
We apply reasonable technical and organisational measures to protect the data: encryption in transit (HTTPS/TLS), access control, activity logging, SMTP authentication and periodic vendor review.
9. Changes to this policy
We may update this policy to reflect legal or service changes. The current version is always published at tupuntolimpio.es/privacidad with the last update date.