Legal
Privacy Notice
Last updated: October 26, 2026
At CANDABIT we handle your personal data with the same precision we use to build software: only what is necessary, for clear purposes and with appropriate security measures. This notice explains what data we collect through candabit.com, why we use it and how you can exercise your rights.
1. Data controller
[RAZÓN SOCIAL COMPLETA] (hereinafter “CANDABIT”), with registered address at [DOMICILIO FISCAL COMPLETO], is the controller of your personal data. Privacy contact: privacidad@candabit.com.
2. Personal data we collect
- Contact form: name, company, email address, service of interest and the content of your message.
- Technical data: IP address, browser type, pages visited, and date and time of access, which the server logs automatically for security. Fonts and other site resources are served from our own server, without third parties.
- Analytics data: only if you accept analytics cookies, aggregated information about how the site is used (see section 7).
We do not request sensitive personal data or financial data through this site.
3. Purposes of processing
Primary purposes (necessary to handle your request):
- Responding to your messages and requests for information.
- Preparing technical and commercial proposals for the services you request.
- Following up on any business relationship that may be established.
- Keeping the site secure and preventing abuse or fraud.
Secondary purposes (not necessary; you may opt out):
- Measuring and improving the site through analytics.
- Sending you information about CANDABIT services related to your request.
If you do not want your data used for secondary purposes, write to us at privacidad@candabit.com. Opting out will not affect how we handle your request.
4. Legal basis (visitors from the European Economic Area)
If you are in the European Union or the European Economic Area, we process your data under the General Data Protection Regulation (GDPR) on the following bases: taking pre-contractual steps at your request (responding to your request), our legitimate interest (site security) and your consent (analytics cookies and information about our services), which you may withdraw at any time.
5. Transfers and processors
We do not sell or rent your personal data. We may share it only with:
- Providers of web hosting, email and analytics services (Google Analytics, only if you accept analytics cookies), who act on our behalf and under confidentiality obligations.
- Competent authorities when legally required.
Some of these providers may be located outside your country. In such cases we seek to ensure that appropriate safeguards are in place.
6. Retention
We keep contact data for as long as needed to handle your request and, where applicable, for the duration of the business relationship and any period required by law. Server technical logs are kept for a maximum of [90] days, unless needed to investigate a security incident.
7. Cookies and similar technologies
We use two types of cookies:
- Necessary: they store your cookie and language preferences. They do not require consent.
- Analytics (Google Analytics 4): only enabled if you accept them. They let us understand, in aggregate, how the site is used. Google may process this data under its own privacy policy.
You can change your choice at any time from .
8. Your rights
You may exercise your rights of access, rectification, cancellation and objection (ARCO rights under Mexican law) and, where applicable, the rights to erasure, restriction of processing and portability, as well as withdraw your consent or limit the use of your data. To do so, send an email to privacidad@candabit.com including:
- Your name and a way to reply to you.
- A document proving your identity (or that of your representative).
- A clear description of the right you wish to exercise and the data involved.
We will reply within a maximum of 20 business days. If you believe your request has not been properly handled, you may contact the competent data protection authority: in Mexico, the Secretaría Anticorrupción y Buen Gobierno; in the European Union, the supervisory authority of your country.
9. Security
We apply administrative, technical and physical measures to protect your data, such as encrypted communications (HTTPS), access controls and the principle of least privilege. No system is infallible; if we detect a breach that affects your rights, we will notify you.
10. Minors
This site is aimed at businesses and professionals. We do not knowingly collect data from minors.
11. Changes to this notice
We may update this notice to reflect legal changes or changes to our services. The current version will be published on this page with its update date.
This document is a translation. In case of discrepancy, the Spanish version prevails.