IT-Ability
Privacy Policy
Last updated: 15 August 2026
This website is operated under the IT-Ability trade name. For privacy matters, IT-Ability acts as controller for data collected through this website and direct business contact. The exact legal/fiscal identity applicable to a commercial assignment is stated on the quotation or invoice.
1. Contact
Privacy enquiries can be sent to [email protected]. IT-Ability is based in Gran Canaria, Spain.
2. Data we process
Depending on your contact with us, we may process your name, company name, email address, telephone number, billing details, correspondence, quotation/project information and technical information needed to perform a service. The website itself has no contact form; contact is initiated through your own email application.
3. Technical data and server logs
The hosting environment may record technical logs such as IP address, date/time, requested page, user agent and error information for security, troubleshooting, abuse prevention and reliable operation.
4. Google Analytics
Google Analytics 4 is used only after you actively consent to analytics cookies. If you reject analytics, the Google Analytics script is not loaded by this site. You can change your choice at any time through “Cookie settings” in the footer.
5. Purposes and legal bases
Data is processed to answer enquiries, prepare quotations, perform agreements, provide technical support, manage security, invoice customers and comply with legal obligations. Depending on the situation, processing is based on contract or pre-contractual steps, legal obligation, legitimate interests such as security and administration, or consent.
6. Customer systems
During technical work IT-Ability may obtain access to websites, servers, mailboxes, logs or databases containing personal data controlled by the customer. Such data is accessed only as necessary for the assignment and is not used for IT-Ability’s own unrelated purposes.
7. Processors and recipients
Data may be handled by providers necessary for hosting, email, DNS, security, accounting, cloud services or analytics. Access is limited to what is needed for their service. Where required, appropriate data-processing arrangements are used.
8. International transfers
Some technology providers may process data outside the European Economic Area. Where this occurs, transfers are handled using an applicable legal mechanism and safeguards required by data-protection law.
9. Retention
Personal data is kept only as long as needed for the relevant purpose. Commercial, accounting and invoice records may be kept longer where tax or legal retention duties require it. Technical logs are retained for a proportionate security and troubleshooting period.
10. Security
Reasonable technical and organisational measures are used to protect personal data, such as access control, secure connections, updates, backups, logging and authentication. No digital system can provide an absolute security guarantee.
11. Your rights
Depending on the circumstances, you may have rights of access, rectification, erasure, restriction, objection, data portability and withdrawal of consent. Requests can be sent to [email protected]. Identity verification may be requested where necessary to prevent unauthorised disclosure.
12. Complaints
You may complain to the competent data-protection supervisory authority. For a controller established in Spain, this will generally be the Agencia Española de Protección de Datos (AEPD).
13. Changes
This privacy policy may be updated when the website, services, suppliers or legal requirements change. The current version is published on this page.