Privacy policy
Last updated: October 2026
This English version is provided for information purposes. In the event of any discrepancy, the Spanish version shall prevail.
1. Data controller
CERES SMART TECHNOLOGY, S.L., tax ID (NIF) B05631551, with registered office at Paseo del Sol 6, 2nd floor, door E, 28880 Meco (Madrid), Spain. You can contact us about any data protection matter at info@ceres-st.es, through the form on the Contact page or by post at the address above.
2. What data we process
We process the data you provide through the contact form: name, email address, phone number and company (the last two are optional), area and service of interest, the content of your message and, if your enquiry concerns precision agriculture, the crop, the location and approximate area of the plot, and your objective. The language of the page you write from and the technical data needed to receive the submission and protect it against abuse are also recorded.
If you call us or message us on WhatsApp, we will process your phone number, the name you display and the content of the conversation, for the same purpose of answering your enquiry.
Please do not include data about third parties or special categories of data (for example, health data) in your message. If you provide data about another person, you must have informed them beforehand.
3. Why we process it and on what legal basis
| Purpose | Legal basis |
|---|---|
| To answer your enquiry and, if you request it, prepare a proposal or quote. | Steps taken at the request of the data subject prior to entering into a contract (art. 6(1)(b) GDPR). |
| To answer general enquiries and keep in touch with contact persons at companies and organisations. | Legitimate interest in answering the enquiries received (art. 6(1)(f) GDPR). |
| To protect the form against automated or abusive submissions. | Legitimate interest in the security of the website (art. 6(1)(f) GDPR). |
We do not use your data to send you advertising or newsletters, we do not create profiles and we do not make automated decisions. If we offer marketing communications in the future, we will only send them with your express consent, which will be requested separately and which you may withdraw at any time.
4. How long we keep it
We keep the data for as long as necessary to answer your enquiry. If the enquiry does not lead to a business relationship, the data is deleted within a maximum of 12 months from receipt. If a business relationship begins, the data is kept for as long as it lasts. After that, the data will be kept blocked for the statutory periods during which liability may arise and will then be deleted.
5. Who we share it with
We do not disclose your data to third parties unless required by law. To provide the service we rely on providers acting as data processors, with the safeguards required by the GDPR:
- Website hosting and form management provider.
- Email service provider where enquiries are received.
If you choose to message us on WhatsApp, that service is provided by WhatsApp Ireland Limited (Meta group), which processes the conversation data under its own terms and privacy policy. If you prefer not to use it, you can contact us by email, by phone or through the form.
6. International transfers
Some of these providers may be based or process data outside the European Economic Area. In that case, the transfer takes place with the safeguards provided for in the GDPR, such as a European Commission adequacy decision or standard contractual clauses approved by the Commission.
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to info@ceres-st.es, through the contact form or by post to the address given in section 1, stating the right you wish to exercise. If there is reasonable doubt about your identity, we may ask for additional information to confirm it.
If you believe the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Mandatory and optional data
Fields marked with an asterisk are required to answer your enquiry; if you do not provide them, we will not be able to reply. The other fields are optional.
9. Security
We apply technical and organisational measures appropriate to the risk to protect your data against loss, unauthorised access or alteration. The website is served over an encrypted connection (HTTPS).
10. Minors
This website is aimed at professionals, companies and organisations. It is not intended for children under 14.
11. Changes to this policy
We may update this policy to reflect changes in the law or in our services. The date of the last update appears at the top of the text.