Privacy policy
G729, SL process personal data in two legal positions different. This policy describes the two.
- Part A — G729 as responsible for the treatment: data of visitors of this web site, applicants of information, and contact persons for customers and suppliers.
- Part B — G729 as the person in charge of the treatment: data, and our customers are treated through the SMS platform.is.
PART A — G729 AS RESPONSIBLE for THE TREATMENT
A. 1 · Responsible
| Responsible | G729, SL |
| NIF | B45850724 |
| Home | C/ San Crispín, 72 — - Sectur 45510 Fuensalida (Toledo), Spain |
| Email privacy | info@sms.es |
A. 2 · Treatments, purposes, legal bases and deadlines
| Treatment | Data | Legal basis | Conservation |
|---|---|---|---|
| Care of requests for information and demo | Name, email, phone, company, need indicated | Art. 6.1.b RGPD — application of measures pre-contractual at the request of the interested party | 12 months from the last contact if there is not hiring |
| Management of the contractual relationship | Professional contact details, billing | Art. 6.1.b RGPD — performance of the contract | Duration of the contract + periods of limitation legal (commercial, fiscal) |
| Obligations tax and accounting | Billing information | Art. 6.1.c RGPD — legal obligation (Code of Commerce, LGT) | 6 years (art. 30 C.Com.) / 4 years (LGT), whichever is applicable |
| Obligations as operator | Traffic data associated with the communication | Art. 6.1.c RGPD — legal obligation (Law 25/2007 and Law 11/2022) | 12 months (art. 5 Law 25/2007) |
| Commercial communications to customers about similar services | Art. 6.1.f RGPD — legitimate interest (art. 21.2 LSSI) | Until opposition | |
| Commercial communications to non-customers | Email, data professionals | Art. 6.1.to RGPD — consent | Until withdrawal of the consent |
| Commercial prospection B2B | Data professionals from public sources | Art. 6.1.f RGPD — legitimate interest, with evaluation of weighting documented | 12 months from the collection, or even opposition |
| Web analytics | Identifiers, cookies, browsing behavior | Art. 6.1.to RGPD — consent (art. 22.2 LSSI) | View Cookie Policy |
| Information security and fraud prevention | Access log, IP | Art. 6.1.f RGPD — legitimate interest | 12 months |
A. 3 · automated Decisions
Creation of profiles for advertising purposes. If you are giving your consent to advertising cookies), we use Google Ads to measure the effectiveness of our campaigns and to show you advertisements of our services on the platforms of Google and on sites of your display network, depending on the pages you have visited on sms.is. This treatment involves the elaboration of profiles in the sense of art. 4.4 of the RGPDwith the only purpose to adapt advertisements to your interests.
- Legal basis: your consent (art. 6.1.to RGPD and art. 22.2 LSSI).
- How to avoid it: not paying the consent of the panel of cookies, or taking it off at any time from "Cookies settings" in the footer of the page. Removing it does not limit access to any part of the site.
- Technical detail: see Cookie policysection 4.3.
- Settings in Google: you can manage the personalization of ads in your Google account on https://myadcenter.google.com
Automated decisions. We do not adopt decisions based solely on automatic processing, which produce legal effects on you or affects you significantly in a similar way, in the sense of art. 22 of the RGPD.
A. 4 · Recipients and managers
Communicate personal data to:
- Public administrations and competent authoritieswhen there is a legal obligation.
- Providers that act as responsible of the treatment under contract in accordance with art. 28 RGPD:
| Provider | Service | Location | International transfer |
|---|---|---|---|
| Hostinger | Web Hosting | EE.UU | No |
| Google Ireland Ltd. / Google LLC | Analytical (GA4), Tag Manager | Ireland / USA | Yes — Google LLC is certified in the EU-US Data Privacy Framework (adequacy Decision of the European Commission of 10/07/2023) |
| Target Platforms Ireland Ltd. | Channel WhatsApp Business | Ireland / USA | Yes |
A. 5 · international Transfers
When there are transfers of personal data outside the European Economic area, are performed under any of the following mechanisms of Chapter V of the RGPD:
- Adequacy decision (art. 45): in the case of providers who are certified in the EU-US Data Privacy Framework.
- Standard Contractual Clauses approved by the European Commission (art. 46.2.c), with evaluation of the impact of the transfer when appropriate.
- Need for the execution of the contract (art. 49.1.b): the delivery of messages to recipients located outside the EEA in this way, the transmission of the destination number and the content of the operators of the country of destination is technically essential for providing the service requested.
You may request information about the warranties that apply to a particular transfer in the registered address.
A. 6 · Your rights
You can exercise your rights access, rectification, suppression, opposition, limitation of treatment, portability and not to be subject to automated individual decisions, as well as withdraw consent at any time, without this affecting the lawfulness of the previous treatment.
- Channel of exercise: by writing to the registered office, stating the right exercised, and accompanying proof of identity.
- Response time: one month, extendable for two additional months, in cases of particular complexity (art. 12.3 RGPD).
- Claim: you may lodge a complaint with the Spanish agency of Protection of Data (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid). Thank you for that, if it considers it expedient, to go before us.
A. 7 · Security
We apply technical and organisational measures in accordance with art. 32 RGPD, evaluated in relation to the risk. Our Management System Information Security is certified in accordance with ISO/IEC 27001:2022, certificate no. CZE – 2400127 issued by BUREAU VERITAS CERTIFICATION CZ, s. r.or.
A. 8 · Modifications
We may update this policy. The current version will always be available on this page with their date of update.
PART B — G729 AS the person in CHARGE OF the TREATMENT
B. 1 · Scope
When a client uses the SMS platform.is to send messages, manage contacts, or keep conversations, the customer is the responsible for the treatment such personal data (phone numbers, names, content of messages, data recipients). G729, SL acts as a manager of the treatmenttrying these data only in accordance with the instructions documented in the client.
B. 2 · contractual Framework
This relationship is governed by the Agreement in Charge of the Treatment (DPA), which is an integral part of the General terms and Conditions of Service and it governs:
- Purpose, duration, nature and purpose of the treatment
- Types of personal data and categories of data subjects
- Instructions documented by the responsible
- Duty of confidentiality of authorized personnel
- Security measures (art. 32 RGPD)
- Regime subencargados and the right of opposition of the client
- Assistance in the exercise of rights of the interested
- Notification of security breaches
- Deletion or return of data to the end of the service
- Right of audit
B. 3 · Obligations of the customer
The customer is responsible, ensures that you have a legal basis valid for the treatment of the data, its recipients, and, in the case of commercial communications, the consent required by the art. 21 of the LSSI.. The use of the platform is subject in addition to Acceptable Use policy.
B. 4 · delivery Chain
The delivery of messages requires the intervention of operators of national and international telecommunications, which act as a responsible independent in respect of traffic data necessary for the routing, according to the sectoral laws.
G729, SL — SMS.es Last update: July 17, 2026
