Privacy policy

Updated: 18 October 2026.

Controller and scope

Fernando Donate Pardo, sole trader (self-employed), Spanish tax ID (NIF) 21004295M, trading as OLSUM. Address: Carrer Verge del Pilar 6, Picanya, Valencia, Spain. Contact: hello@olsum.es. Marketing website: https://olsum.es. Application: https://app.olsum.es. OLSUM is a trading name, not a separate company or legal person. This information covers the marketing website under the GDPR and Spanish Organic Law 3/2018.

A. Marketing website: contact and support

The form collects name, email address, enquiry subject and message. Required fields enable a reply; without them the form cannot be sent. Do not submit sensitive data or unnecessary information about workers or customers. Contract enquiries and contractual support rely on contract performance or requested precontractual steps (GDPR Art. 6(1)(b)). General enquiries rely on a legitimate interest in replying to people who contact us (Art. 6(1)(f)), balanced against their expectation of a reply. Legal obligations rely on Art. 6(1)(c). The privacy acknowledgement checkbox does not make consent the basis for all processing. The form does not subscribe you to advertising.

Delivery, infrastructure and security

Messages are sent through Resend (Plus Five Five, Inc.) to hello@olsum.es. The form does not create its own enquiry database. Messages are processed by the delivery provider and receiving mailbox, supplied by DonDominio (Soluciones Corporativas IP, S.L.). The website uses Sites and Cloudflare infrastructure. To limit form abuse, the request IP is used to generate a SHA-256 identifier associated with a 15-minute window; the limiter does not store the clear-text IP, without prejudice to infrastructure technical logs. This processing relies on the legitimate interest in protecting the service. The landing page loads fonts from Google Fonts: this connection sends technical data, such as IP and request information, to Google to serve the fonts. OLSUM does not use it as an analytics or advertising tool.

Recipients and transfers

The provider and necessary hosting, email and security providers process data within their respective roles, as do authorities where legally required. Resend provides for international transfers, including to the United States, and publishes safeguards in its data processing agreement and subprocessor list. We do not claim all data stays in the EU. DonDominio operates the receiving mailbox under its hosting and email terms. See its data protection information. Hosting and font services may involve access from other countries; not all data is guaranteed to remain in Spain or the European Union. Where an international transfer applies, it must be subject to an adequacy decision, standard contractual clauses or another GDPR safeguard. You may request information about the relevant safeguards and a copy where applicable from hello@olsum.es. OLSUM does not use form enquiries to make automated decisions with legal effects or create commercial profiles.

Retention

Enquiries are retained while needed to answer them and follow up related matters. Afterwards, they are deleted or, where required, restricted during statutory liability periods and deleted when these end. Contractual and tax information is kept for applicable statutory periods. Email and infrastructure providers may retain technical logs and backups for operational, security and applicable legal purposes. These records are distinct from the enquiry content and its retention by OLSUM. The antispam identifier uses 15-minute windows. Browser storage is explained in Cookies.

Rights and complaints

You may request access, rectification, erasure, objection, restriction and portability where applicable by writing to hello@olsum.es or the provider’s address. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Additional identification will only be requested if necessary. Requests are generally answered within one month; any legally permitted extension will be communicated. You may complain to the Spanish Data Protection Agency or another competent authority where applicable.

B. Separate application app.olsum.es

Registration, contracting and job management take place at app.olsum.es, independently of this marketing website. Processing of accounts, subscriptions, workers, photographs, hours and reports requires specific information accessible in the application. This policy describes processing on the marketing website and does not replace the application’s specific information. See the application privacy policy for accounts, jobs, workers, photos and hours. You may also contact hello@olsum.es. When a business supplies other people’s data, controller and processor roles must be defined and an appropriate processing agreement concluded where required.