Cimalor

Privacy policy

Last updated: October 8, 2026

This page explains what personal data we handle when you visit cimalor.com or email us, why, and what rights you have. It follows the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

The short version: this website has no forms, no accounts, no analytics, no advertising and sets no cookies. The only data we handle is what reaches us when you email us, plus the technical logs that our hosting provider keeps.

1. Who is responsible for your data

  • Controller: Bruno Gutiérrez Simón
  • Contact for data protection matters: bruno@cimalor.com

"Cimalor" is the name of a project, not a legal entity. The controller is the person identified above. See also the Legal notice.

2. Cookies and tracking

This website sets no cookies, neither our own nor from third parties. It does not use local storage or similar technologies to identify you, and it has no analytics, advertising pixels or social media widgets. All fonts, images and code are served from our own site, and your browser does not contact any third-party server to display it. Because of this, there is no cookie banner.

If our hosting provider's security features ever require a strictly necessary cookie, or if anything else changes, we will update this policy before the change goes live and, where the law requires it, ask for your consent first.

3. What data we handle, why, and on what legal basis

a) Emails you send us

The site shows email addresses as plain mailto: links. There is no contact form. If you write to support@cimalor.com or bruno@cimalor.com, we receive your email address, your name if it appears in the address or signature, the content of your message and any attachments, and the date and time.

  • Purpose: to read and answer your message (questions about the modules, bug reports, requests, data protection requests).
  • Legal basis: our legitimate interest in answering the people who contact us (Article 6.1.f GDPR), which you trigger by writing to us. We consider that this does not override your rights, since you start the contact yourself and we use the data only to reply.
  • Not used for: newsletters, marketing, profiling or sale to anyone. We will not add you to any list because you wrote to us.

b) Server access logs

Our website is delivered through Cloudflare. As with any web server, each request to cimalor.com is processed with technical data: IP address, date and time, requested page, response status, and browser and device type (user agent).

  • Purpose: to deliver the website, keep it secure and working, and detect abuse or faults.
  • Legal basis: legitimate interest in the security and correct operation of the site (Article 6.1.f GDPR).
  • Who handles it: Cloudflare acts as our data processor for this data under its Customer Data Processing Addendum.
  • Our own logs: we do not keep our own access logs and we do not export these logs. We do not use them to identify visitors or to build profiles.

4. How long we keep your data

  • Emails: 12 months from the last message in the conversation. After that they are deleted, unless a longer period is needed to deal with a legal claim.
  • Server logs: Cloudflare does not publish a fixed period for this data. It is short-lived technical and security data, processed by Cloudflare as our processor and kept, according to its addendum, until the processing is no longer necessary or the agreement ends. We do not keep a copy.

5. Who receives your data

We do not sell or share your data for advertising. Your data may be handled by service providers who act on our behalf and only under our instructions (data processors):

  • Hosting provider: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.
  • Email: messages to our addresses are forwarded by Cloudflare Email Routing (Cloudflare, Inc.) and stored in a Gmail mailbox provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, together with its parent company Google LLC (USA).

Only the controller has access to the mailboxes. We will disclose data to authorities only when the law requires it.

International transfers: Cloudflare processes data in data centers in the United States and Europe. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework and uses Standard Contractual Clauses as a fallback safeguard. Google may store email on servers outside the European Economic Area; Google LLC is certified under the EU-U.S. Data Privacy Framework and also relies on Standard Contractual Clauses.

6. Your rights

You have the right to:

  • Access the personal data we hold about you.
  • Rectify data that is inaccurate.
  • Erase your data ("right to be forgotten").
  • Restrict the processing of your data.
  • Object to the processing based on legitimate interest.
  • Data portability, where applicable.
  • Withdraw consent at any time, if we ever rely on it. Withdrawal does not affect processing done before.

To exercise any of them, email bruno@cimalor.com with the subject "Data protection request". We may ask you to confirm your identity. We will answer within one month, as the GDPR requires. This one-month period is a legal deadline for data requests and is separate from the support reply time of 48 to 72 business hours.

7. Complaints

If you believe we have not handled your data properly, please contact us first so we can try to fix it. You also have the right to lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD): www.aepd.es, C/ Jorge Juan, 6, 28001 Madrid, Spain. If you live in another EU country, you can also contact your local data protection authority.

8. Security

We use reasonable technical and organizational measures to protect the data we handle. No system is completely secure, and we cannot guarantee absolute security. Please avoid sending sensitive personal data, or credentials and passwords, by email.

9. Links to other sites

This site links to GitHub and the Odoo Apps Store. Those are separate services with their own privacy policies, and they may collect data once you follow a link. This policy does not cover them.

10. Changes to this policy

If we change this policy, we will publish the new version here and update the date at the top.