Last updated · 12 June 2026
1. Who is responsible for your data
- Controller
- Beyond Mindset S.L.
- NIF
- B10793222
- Address
- Carrer Ponent 5, 07144 Costitx, Illes Balears, Spain
- team@smartxops.com
2. What we collect
Contact form. When you send a message we receive your name, your email address, and the content of your message. Nothing else is asked, and nothing else is collected behind the scenes. (The form contains a hidden anti-spam field that humans never see or fill; it carries no personal data from real visitors.)
Booking a call. The "Book a call" buttons take you to Calendly, a third-party scheduling service. Anything you enter there is processed by Calendly under its own privacy notice.
Technical logs. Our hosting provider keeps standard, short-lived server logs (IP address, request time) for security and operation of the site. We run no analytics and build no visitor profiles.
3. Why, and on what legal basis
We use your data for one thing: responding to your enquiry and the conversation that may follow about working together.
- Art. 6(1)(b) GDPR — taking steps at your request prior to entering into a contract.
- Art. 6(1)(f) GDPR — our legitimate interest in answering business enquiries addressed to us, and in keeping the site secure and free of spam.
We do not use your data for advertising, we do not sell it, and we will not add you to a mailing list because you asked a question.
4. Who processes it for us
Your message travels through a small, fixed set of service providers acting as processors:
- Vercel Inc. (USA) — hosts the site and runs the function that receives the form.
- Resend (USA) — delivers the form submission to our mailbox as an email.
- Google (USA/EU) — operates the mailbox where your message is received and answered.
- Calendly LLC (USA) — only if you book a call, under its own privacy notice.
Where these providers process data outside the European Economic Area, transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses. We share data with no one else, unless the law requires it.
5. How long we keep it
Enquiries are kept for a maximum of 12 months after our last exchange, then deleted. If your enquiry turns into a client relationship, the data moves to that engagement and is kept for its duration plus any legally required retention periods.
6. Your rights
You can ask us at any time to access, rectify, erase, or restrict your data, to receive it in a portable format, or to object to processing based on legitimate interest. One email to team@smartxops.com is enough; we will answer within one month.
If you believe we have handled your data badly, you have the right to lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos — www.aepd.es. We would prefer you tell us first, so we can fix it.
7. Cookies
This site sets no cookies. No analytics, no tracking, no advertising, no preference storage — nothing is placed in your browser by us. That is why there is no cookie banner. If we ever add a tool that needs cookies, this policy and the site will change before the tool does.
Two third-party connections do exist and are worth naming: the site's fonts are loaded from Google Fonts, which means your browser requests font files from Google's servers and Google receives your IP address in that request (no cookies are set). And the "Book a call" buttons are plain links that open Calendly's own website, where Calendly's cookie policy applies — nothing from Calendly is embedded in our pages.
8. No automated decisions
We make no automated decisions about you that produce legal or similarly significant effects. A person reads your message and a person answers it.
9. Changes to this policy
If we change how we handle data, this page changes with it, with a new date at the top. Material changes will be visible — not buried.