Privacy policy
Last updated: 04/11/2026
This English version is provided for information. In case of discrepancy, the Spanish version prevails.
At STARTIA we process your personal data transparently and securely, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights (LOPDGDD).
1. Data controller
Startia Operadora, S.L. · CIF B56079940 · C/ Astrónoma Cecilia Payne, Edf. Centauro, 2º, 14014 Córdoba, Spain · +34 919 31 00 00.
Data Protection Officer (DPO): dpd@startia.es.
2. What data we process, why and on what legal basis
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Handling information and sign-up requests from the contact form | Identification, contact, company, message, IP | Consent and pre-contractual measures (Art. 6(1)(a) and (b) GDPR) | 12 months from the last communication, unless you sign up |
| Providing contracted services, billing and customer support | Identification, contact, bank, service and usage data | Performance of a contract (Art. 6(1)(b)) | For the duration of the relationship and then the statutory periods (6 years, Commercial Code; 4 years, tax law) |
| Retention of traffic and location data required by law | Communications traffic data | Legal obligation (Art. 6(1)(c); Law 25/2007) | 12 months |
| Customer area management and access security | Encrypted credentials, second factor, IP, browser, activity log | Performance of a contract and legitimate interest in information security (Art. 6(1)(b) and (f); Recital 49) | Security logs: up to 2 years |
| Marketing communications about similar products | Contact | Legitimate interest (Art. 21(2) LSSI) or consent; you may object at any time | Until you object |
3. Recipients
We do not share your data with third parties except where required by law (tax authorities, courts, law enforcement as provided by law) or where necessary to provide the service (wholesale operators, number porting, financial institutions for payment collection). Providers processing data on behalf of STARTIA (processors) have signed the agreement required by Article 28 GDPR.
4. International transfers
We do not make international data transfers. The systems hosting this website and the customer area are located in Spain.
5. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, by writing to dpd@startia.es or by post to our registered office, stating the right you wish to exercise and proving your identity. We will respond within one month. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Subscriber directories
In accordance with telecoms regulations, your data will only appear in subscriber directories if you expressly authorise it, and you may choose which data are included or request removal free of charge at any time.
7. Security
We apply technical and organisational measures in line with the National Security Framework at HIGH category: encrypted communications (TLS 1.2/1.3), passwords protected with Argon2id, two-factor authentication, tamper-evident activity logs, least privilege and backups.
8. Automated decisions
We do not take decisions based solely on automated processing that produce legal effects on you.