STEEL ON IT
Privacy Policy
Last updated: 25 October 2026
1. Data controller
The controller of the personal data provided through the Steel On It website is:
- HERMES CONNECT S.L.
- Tax ID (NIF): B87958120.
- Registered address: Calle Velázquez 37, 1ª planta, 28001 Madrid, Spain.
- Contact email: sales@steelonit.com.
Steel On It is the trade name used on the website.
2. Personal data processed
We may process the data you voluntarily provide through our contact forms, including:
- Name.
- Phone number.
- Email address.
- Reason for your enquiry.
- Content of your message.
Technical data strictly necessary for the operation, maintenance and security of the website may also be processed (for example the IP address and access logs generated by the hosting service), according to the services actually used.
This website uses no analytics, advertising or tracking tools.
3. Purposes of the processing
Personal data will be processed for the following purposes:
- Handling enquiries and information requests.
- Preparing and managing quotation requests.
- Replying to collaboration proposals.
- Maintaining the communications needed to handle your requests.
- Managing pre-contractual or contractual relationships where applicable.
- Maintaining the technical security of the website and complying with applicable legal obligations.
Data received through the form will not be used to send unsolicited commercial communications without an adequate legal basis.
4. Legal basis
Depending on the nature of the request, processing may be based on:
- Taking pre-contractual steps at the request of the data subject.
- The legitimate interest in replying to the enquiries or communications received, after assessment where appropriate.
- The data subject's consent for processing that requires it.
- Compliance with legal obligations.
The applicable legal basis relates to the actual purpose of each processing activity.
5. Recipients and service providers
Data may be processed by technology providers that deliver services needed to operate the website and receive communications. According to the technical verification carried out, the actual providers are:
- Tally (tally.so): provider of the contact forms. It receives the data you enter in the form. The form is loaded only after you give your consent (see the Cookie Policy).
- Vercel: web hosting provider. It may process technical connection data (such as the IP address) needed to serve the site.
- When the Tally form loads, technical requests are also made to Google Fonts (typefaces) and to an error-monitoring service (Sentry), initiated by the form itself.
Data may be disclosed to authorities where there is a legal obligation. Personal data is not sold.
6. International transfers
If certain providers involve international data transfers, these will be carried out in line with GDPR requirements, using the applicable safeguards.
The providers mentioned may process data outside the European Economic Area; the specific safeguards depend on each provider's documentation, which will be reviewed before the final publication of this policy.
7. Retention
Data will be kept for as long as necessary to handle requests, manage the related relationships and comply with applicable legal obligations.
Once no longer needed, data will be deleted or kept blocked where legally required.
8. Your rights
Data subjects may request to exercise their rights of access, rectification, erasure, objection, restriction of processing and portability, where applicable.
They may also withdraw consent where processing is based on it, without affecting the lawfulness of processing carried out before withdrawal.
To exercise these rights, write to:
You may also lodge a complaint with the Spanish Data Protection Agency (AEPD):
9. Data security
Appropriate technical and organisational measures will be applied to protect personal data against unauthorised access, loss, alteration or improper disclosure.
10. Updates to this policy
This policy may be updated to reflect regulatory or technical changes, or changes to the processing carried out. The date of the last update is shown at the top of this document.