Terms of Use and Privacy
This policy explains who processes your personal data when you visit this site or complete a form, for what purpose and on what legal basis, for how long, who it is shared with, and what rights you can exercise. It also describes our use of cookies and how to manage them.
Last updated: 21 July 2026
Legal notice and identification
- Owner: Beltz Dev SL (operating under the trade name "TenBeltz").
- VAT: B21697719.
- Registered address: Avenida Elexalde 8, 48940 Leioa (Bizkaia), Spain.
- Domain: tenbeltz.com
- Phone: +34 640 520 819
- Contact:hello@tenbeltz.com
This document is published to comply with Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSICE), Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Data controller
The data controller is Beltz Dev SL (operating under the trade name "TenBeltz"), VAT B21697719, with registered address at Avenida Elexalde 8, 48940 Leioa (Bizkaia), Spain. For any queries you can write tohello@tenbeltz.com.
Beltz Dev SL has not appointed a Data Protection Officer, as none of the circumstances set out in Article 37 GDPR apply. Data protection enquiries are handled at the contact address above.
Data we process
We process only the data you provide voluntarily and the minimum technical data needed to serve and protect the site:
- Data you enter in the contact form: name, email address, company, role, company type, the type of engagement you are looking for, project stage, and the free-text content of your message.
- Data from subsequent communications: the messages we exchange by email or phone following your enquiry.
- Meeting scheduling data: if you book a call through the external calendar service linked on the site, the data you provide is processed on that provider's platform under its own privacy policy.
- Technical browsing data logged by the server (IP address, browser type, date and time of access), necessary to deliver the service and prevent misuse.
- Aggregated analytics data, only if you give your consent in the cookie notice.
We do not collect special categories of data (Article 9 GDPR) and we do not carry out automated decision-making or profiling producing legal effects concerning you. Please do not include third parties' personal data or confidential information in the free-text message field.
Purposes of processing
- Handle and respond to your information requests, enquiries and communications.
- Manage the pre-contractual or professional relationship arising from your contact, including preparing proposals and quotes.
- Send communications related to your enquiry, where you have given consent.
- Ensure the security, availability and integrity of the site and prevent misuse or fraudulent use.
- Obtain aggregated site usage metrics, only with your prior consent.
- Comply with applicable legal, accounting and tax obligations.
Legal basis
Each processing activity relies on its corresponding legal basis under Article 6 GDPR:
- Steps taken at the data subject's request prior to entering into a contract (Art. 6(1)(b)): handling your enquiry and preparing a possible engagement.
- Consent (Art. 6(1)(a)): analytics cookies and communications not strictly necessary to answer you. You may withdraw it at any time, without affecting the lawfulness of processing carried out beforehand.
- Legitimate interest (Art. 6(1)(f)): maintaining site security and keeping a record of communications in order to handle potential claims.
- Compliance with legal obligations (Art. 6(1)(c)): retention of commercial, accounting and tax documentation where a commercial relationship exists.
Retention periods
We keep data for as long as necessary to fulfil the purpose for which it was collected and, thereafter, blocked for the periods legally required to address potential liabilities. You may request erasure at any time.
Enquiries that do not lead to a commercial relationship are kept for 12 months from the last contact, after which they are deleted. Contractual, accounting and tax documentation arising from a commercial relationship is kept for the legally required limitation period, currently 6 years under Article 30 of the Spanish Commercial Code.
Recipients and processors
We do not sell or transfer your data. As a general rule it is not disclosed to third parties, except where legally required or where necessary to operate the site. Providers that access data on our behalf do so as processors, under a contract compliant with Article 28 GDPR and bound by confidentiality.
- Web analytics provider (Ahrefs Analytics), only if you accept analytics cookies.
- The meeting scheduling provider linked from the site, when you choose to book a call.
- Hosting provider for the website and the API (api.tenbeltz.com), based in the European Union; corporate email provider, also based in the European Union. Other processors listed above are established outside the European Economic Area: the web analytics provider (Ahrefs, based in Singapore) and the meeting scheduling provider (Calendly, based in the United States).
Data may also be disclosed to courts, tribunals, law enforcement bodies and public authorities where there is a legal obligation to do so.
International transfers
Some of the providers we use may process data outside the European Economic Area. Where this occurs, the transfer takes place only if there is an adequacy decision from the European Commission or, failing that, appropriate safeguards under Chapter V GDPR, such as Standard Contractual Clauses.
As of this policy, the processors established outside the European Economic Area are the web analytics provider (Ahrefs, based in Singapore) and the meeting scheduling provider (Calendly, based in the United States). These transfers rely on whichever adequacy decision of the European Commission applies to the destination country or, failing that, on the Standard Contractual Clauses approved by the European Commission, under Chapter V GDPR.
Security measures
Beltz Dev SL applies appropriate technical and organisational measures to protect the confidentiality, integrity and availability of the information processed, in line with Article 32 GDPR. Measures implemented on this site include:
- Encryption in transit via TLS/HTTPS across all pages of the site and when the contact form is submitted to our API.
- Data minimisation: forms request only the information needed to handle the enquiry.
- Non-essential cookies blocked by default, loaded only after explicit consent.
- Use of providers bound by a data processing agreement and a duty of confidentiality.
Individualised access control to the systems managing the website and the API; periodic database backups retained for 30 days; encryption at rest of stored credentials; a record of processing activities under Article 30 GDPR; and an internal procedure to notify the supervisory authority of security breaches within 72 hours, under Article 33 GDPR.
The measures described relate to this corporate website. Security controls applying to the projects we build for clients are defined contractually in each engagement and are not covered by this policy. As at the date of this policy, Beltz Dev SL does not hold any security certification of its own.
Your rights
As a data subject you may exercise the following rights at any time:
- Access: find out what personal data of yours we process and obtain a copy.
- Rectification: correct inaccurate data or complete incomplete data.
- Erasure: request deletion of your data where applicable.
- Restriction of processing: ask us to suspend processing in the cases provided for by law.
- Objection: object to processing based on legitimate interest on grounds relating to your particular situation.
- Portability: receive your data in a structured, commonly used, machine-readable format, or request its transmission to another controller.
- Withdrawal of consent: revoke consent at any time, without affecting the lawfulness of prior processing.
To exercise any of these rights, write to hello@tenbeltz.com stating the right you wish to exercise. We may ask you to prove your identity. We will respond within one month of receiving the request, extendable by a further two months where the complexity or number of requests justifies it. Exercising these rights is free of charge.
If you believe the processing of your data does not comply with the applicable rules, or that your rights have not been properly addressed, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), the competent supervisory authority: C/ Jorge Juan 6, 28001 Madrid, Spain — www.aepd.es.
Site use and intellectual property
The information published on this site is provided for general guidance and does not constitute a binding offer or professional advice. The site, its code, designs, logos, text and graphics are the property of Beltz Dev SL or are used with the authorisation of their owners. Reproduction in whole or in part, distribution or exploitation requires prior written authorisation.
The site may link to third-party content. Beltz Dev SL does not control such content and accepts no responsibility for it. If you find content that may infringe applicable law or third-party rights, report it to hello@tenbeltz.com and we will review and, where appropriate, remove it.
The site has been tested to work correctly, but Beltz Dev SL cannot guarantee that it is free of errors or that the service will be available without interruption, particularly in the event of force majeure or failures outside its control.
Governing law and jurisdiction
Relations arising from the use of this site are governed by Spanish law. Any dispute shall be subject to the courts of the user's domicile or of the place of performance of the obligation, where the user qualifies as a consumer.
Changes to this policy
Beltz Dev SL may update this policy to reflect regulatory, technical or functional changes to the site. The version in force will always be the one published on this page, together with its last updated date.
Last updated: 21 July 2026