Back home

Legal

Privacy policy

Last updated: September 2026

01

Privacy at a glance

General information

This Privacy Policy explains how Digital Duke collects, uses and protects personal data when you visit our website or contact us through the forms available on the website.

Personal data means any information relating to an identified or identifiable individual.

Data collection on this website

Who is responsible for data collection?

The party responsible for processing personal data on this website is:

Digital Duke — Carrer Mestre Palau, 12 — 46008 Valencia, Spain — Email: info@d-duke.tech

How do we collect your data?

We collect personal data when you voluntarily provide it to us, for example by submitting a contact or enquiry form on our website.

Depending on the form, this may include:

  • name;
  • email address;
  • company name;
  • phone number, where requested;
  • information included in your message or enquiry.

We may also automatically collect certain technical information when you visit our website, such as your IP address, browser type, operating system, date and time of access, and other technical information necessary for the secure and proper operation of the website.

02

Hosting

Our website is developed and hosted using Lovable and its cloud infrastructure.

Lovable may process technical information generated when you access the website, including IP addresses, access times and other server log information, where necessary to provide, maintain and secure the website.

If you submit a contact form, the information you provide may be transmitted directly to our designated email address for the purpose of responding to your enquiry. Lovable may process such information as part of providing the website and related technical services.

Lovable Cloud supports regional data hosting in the European Union, the United States and Asia Pacific. The applicable data location depends on the configuration of the relevant service. Data is generally retained within the selected region and does not move across regions by default.

Where required by applicable data protection law, appropriate contractual and technical safeguards are used in relation to service providers and international data transfers.

03

General information and mandatory notices

Data protection

We take the protection of your personal data seriously. We process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

Please note that data transmission over the internet may involve security risks. While we take appropriate technical and organizational measures to protect personal data, no method of transmission or storage can be guaranteed to be completely secure.

Data Controller

The data controller responsible for processing personal data through this website is:

Digital Duke — Carrer Mestre Palau, 12 — 46008 Valencia, Spain — Email: info@d-duke.tech

The data controller determines the purposes and means of processing personal data.

Storage period

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Personal data submitted through contact forms will generally be retained for as long as necessary to handle the enquiry and any resulting business communication.

04

Legal basis for processing

Depending on the circumstances, we process personal data on the following legal bases under Article 6 GDPR:

  • Consent (Art. 6(1)(a) GDPR) where you have given your consent to a specific processing activity;
  • Pre-contractual measures (Art. 6(1)(b) GDPR) where processing is necessary to respond to an enquiry or take steps at your request before entering into a contract;
  • Legal obligation (Art. 6(1)(c) GDPR) where processing is necessary to comply with a legal obligation;
  • Legitimate interests (Art. 6(1)(f) GDPR) where processing is necessary for our legitimate interests, provided that these interests are not overridden by your rights and freedoms.

The specific legal basis applicable to a particular processing activity depends on the context and purpose of the processing.

05

Recipients of personal data

We may share personal data with service providers who process data on our behalf and are necessary for operating our website and handling enquiries.

These may include, where applicable:

  • website hosting and infrastructure providers, including Lovable;
  • providers used to process contact form submissions;
  • email and communication service providers;
  • analytics providers, including Google Analytics, where the required consent has been obtained.

Such providers may process personal data only to the extent necessary to provide their services and, where required, under appropriate data processing agreements.

06

Cookies

Our website uses cookies and similar technologies.

Cookies are small text files stored on your device when you visit a website. They can be used to enable essential website functions, remember preferences, analyze website usage or support other website functionality.

Necessary cookies

Some cookies may be necessary for the website to function properly and securely. These cookies do not require consent where they are strictly necessary for the service requested by the user.

Analytics cookies

We use Google Analytics to understand how visitors use our website and to improve its performance and content.

Analytics cookies and similar technologies will only be activated where required after obtaining the user's consent.

Users can manage or withdraw their cookie preferences through the cookie settings available on the website.

Non-essential cookies, including analytics cookies where consent is required, will not be activated before the required consent is obtained.

07

Contact forms

When you submit a form on our website, we process the information you provide in order to respond to your enquiry and communicate with you regarding our services.

Depending on the form, this may include your name, email address, phone number, company name, and the content of your message.

The legal basis for this processing is generally Article 6(1)(b) GDPR where the processing is necessary to take steps at your request before entering into a contract, or Article 6(1)(f) GDPR where applicable.

We do not use the information submitted through our contact forms for unrelated purposes without an appropriate legal basis.

08

Data transfers to third countries

Some of our service providers may process personal data outside the European Economic Area (EEA), depending on the services and infrastructure used.

Where personal data is transferred outside the EEA, we ensure that the transfer is carried out in accordance with applicable data protection law and that appropriate safeguards are in place where required.

These safeguards may include an adequacy decision, Standard Contractual Clauses, or another legally recognized transfer mechanism.

09

Your rights

Under the GDPR, you may have the following rights in relation to your personal data:

  • Right of access — you may request information about whether we process your personal data and obtain a copy of that data.
  • Right to rectification — you may request correction of inaccurate or incomplete personal data.
  • Right to erasure — you may request deletion of your personal data in certain circumstances.
  • Right to restriction — you may request that we restrict the processing of your personal data in certain circumstances.
  • Right to object — you may object to certain processing based on legitimate interests and to direct marketing.
  • Right to data portability — in certain circumstances, you may receive personal data you have provided to us in a structured, commonly used and machine-readable format.
  • Right to withdraw consent — where processing is based on consent, you may withdraw your consent at any time.
  • Right to lodge a complaint — you may lodge a complaint with the competent data protection supervisory authority.

You may exercise your rights by contacting us at:

info@d-duke.tech

10

Right to lodge a complaint

If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.

As the company is based in Spain, the relevant supervisory authority is:

Agencia Española de Protección de Datos (AEPD)

11

SSL/TLS encryption

For security reasons and to protect the transmission of confidential information, our website uses SSL/TLS encryption.

An encrypted connection can generally be identified by “https://” and the lock symbol displayed in your browser.

12

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, services, data processing activities, or applicable legal requirements.

The latest version will always be published on this page.