Privacy policy

1. Data controller

The controller of your personal data is DRO Marketing, S.L. ("DRO Marketing"), NIF B-12345678, with registered office at Paseo de la Castellana 95, Planta 15, 28046 Madrid, Spain. For any data-protection matter you may contact us at contact@dromarketing.com.

2. Data we collect

We only process data that is adequate, relevant and limited to what is necessary. Depending on your interaction with us, we may process:

• Contact & form data: name, work email, phone, company, budget range, service of interest and the content of your message.
• Client data: billing details and information necessary to deliver our services and manage the contractual relationship.
• Navigation data: IP address, device and browser data, and usage statistics collected via cookies (see our Cookies Policy).

The fields marked as required in our forms are necessary to handle your request; without them we may be unable to respond.

3. Purposes & legal bases

• Respond to enquiries and provide a quote/audit — legal basis: your consent and/or the application of pre-contractual measures at your request (Art. 6.1.a and 6.1.b GDPR).
• Provide our services and manage the contract — legal basis: performance of a contract (Art. 6.1.b GDPR).
• Comply with legal, accounting and tax obligations — legal basis: legal obligation (Art. 6.1.c GDPR).
• Send commercial communications about similar services — legal basis: our legitimate interest or your consent, which you may withdraw at any time (Art. 6.1.a / 6.1.f GDPR).
• Measure audience and improve the website — legal basis: your consent through cookie settings.

4. Retention periods

We keep your data for the time strictly necessary to fulfil the purpose for which it was collected. Enquiry data is kept for up to 12 months if no relationship begins; contractual and billing data is retained for the legally required periods (generally up to 6 years for accounting and tax obligations). Data processed on the basis of consent is kept until you withdraw it.

5. Recipients & processors

We do not sell your personal data. We may share it with trusted service providers acting as data processors under a data-processing agreement, strictly to provide our services, such as:

• Hosting and email providers;
• CRM, analytics and advertising platforms (e.g. Google, Meta) where applicable;
• Professional advisers (accounting, legal) and public authorities where legally required.

6. International transfers

Some of our providers may process data outside the European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses or an adequacy decision.

7. Your rights

You may exercise the following rights free of charge at any time by writing to contact@dromarketing.com, indicating the right you wish to exercise:

• Access, rectification and erasure of your data;
• Objection to and restriction of processing;
• Data portability;
• Withdrawal of consent at any time, without affecting the lawfulness of prior processing.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) if you consider your rights have not been respected.

8. Security

DRO Marketing applies appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, loss or destruction, taking into account the state of the art and the risks of the processing.

9. Changes to this policy

We may update this Privacy Policy to reflect legal or operational changes. The current version is always available on this page; we recommend reviewing it periodically.

Last updated: 2026.