Legal & Policy Documents

1. Introduction
protectedcodematrix ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard information when you use our cyber security services at Calle de Fuencarral 40, 28004 Madrid, Spain.

2. Data Controller
The data controller responsible for your personal data is protectedcodematrix, located at Calle de Fuencarral 40, 28004 Madrid, Spain. Contact: [email protected].

3. Information We Collect
We collect information you provide directly: name, email address, phone number, company details, and project specifications. We also collect technical data including IP addresses, browser type, and usage analytics when you interact with our website.

4. Legal Basis for Processing
We process your data based on: (a) performance of a contract, (b) legitimate interest in improving our services, (c) compliance with legal obligations, and (d) your explicit consent.

5. Data Retention
Personal data is retained for the duration necessary to fulfill the purposes outlined in this policy. Project-related data is retained for 5 years after contract completion. Marketing consent data is retained until withdrawal.

6. Your Rights (GDPR)
Under the General Data Protection Regulation (EU) 2016/679, you have the right to: access your data, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and objection to processing. To exercise these rights, contact [email protected].

7. Data Security
We implement AES-256 encryption, access controls, and regular security audits to protect your data. Our infrastructure is audited against ISO 27001 and SOC 2 Type II standards.

8. International Transfers
Data may be transferred to and processed in countries outside the EEA. We ensure adequate protection through Standard Contractual Clauses (SCCs) approved by the European Commission.

9. Contact
For privacy-related inquiries: [email protected]. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

1. Acceptance of Terms
By engaging the services of protectedcodematrix ("the Company"), located at Calle de Fuencarral 40, 28004 Madrid, Spain, you ("the Client") agree to be bound by these Terms of Service. These terms apply to all cyber security services, consultations, and deliverables provided by the Company.

2. Scope of Services
The Company provides cyber security services including but not limited to: cloud infrastructure encryption, network security, vulnerability assessments, compliance audits, identity and access management, SOC monitoring, secure cloud migration, data loss prevention, security awareness training, and incident response. Specific deliverables are defined in individual Statements of Work (SOW).

3. Service Level Agreements (SLA)
The Company guarantees a 99.99% uptime SLA for monitoring services and a 15-minute response time for critical security incidents. SLA terms are subject to the specific service tier selected by the Client.

4. Payment Terms
All invoices are due within 30 days of issuance unless otherwise specified. Late payments incur a 1.5% monthly surcharge. The Company reserves the right to suspend services for accounts overdue by more than 45 days. Pricing is as quoted in the service agreement and may be subject to annual review.

5. Confidentiality
The Company maintains strict confidentiality regarding all Client data, infrastructure details, and security configurations. All employees and contractors sign NDAs. The Company adheres to GDPR, SOC 2, and ISO 27001 confidentiality requirements.

6. Intellectual Property
Upon full payment, the Client retains ownership of all deliverables produced specifically for their engagement. The Company retains rights to pre-existing tools, methodologies, and frameworks used in service delivery.

7. Limitation of Liability
The Company's liability shall not exceed the total fees paid by the Client in the 12 months preceding the claim. The Company is not liable for indirect, consequential, or punitive damages. Security services are provided on a best-efforts basis within the defined scope.

8. Termination
Either party may terminate with 30 days written notice. The Client is responsible for payment of all services rendered up to the termination date. Confidentiality obligations survive termination for a period of 5 years.

9. Governing Law
These terms are governed by the laws of Spain and the European Union. Disputes shall be resolved in the courts of Madrid, Spain.

1. What Are Cookies
Cookies are small text files stored on your device when you visit our website. They help us provide a secure and functional browsing experience for protectedcodematrix services.

2. Essential Cookies
We use strictly necessary cookies for: session management, security token validation, CSRF protection, and cookie consent persistence. These cookies are required for the website to function and cannot be disabled.

3. Analytics Cookies
We may use privacy-respecting analytics to understand website usage patterns. This data is aggregated and does not personally identify visitors. Analytics data is processed within the EEA.

4. Third-Party Cookies
Our website may load cookies from: Google Maps (for embedded maps on our contact page), CDN providers (for font and script delivery). These third parties have their own privacy policies.

5. Managing Cookies
You can control cookies through your browser settings. Disabling essential cookies may impair website functionality. To manage your cookie consent, clear your browser's localStorage data for this domain.

6. Cookie Retention
Session cookies are deleted when you close your browser. Persistent cookies (including consent preferences) are retained for up to 12 months. Security cookies are retained for the duration of the session.

7. Contact
For questions about our cookie practices: [email protected], Calle de Fuencarral 40, 28004 Madrid, Spain.

1. Refund Eligibility
Refund requests for services provided by protectedcodematrix (Calle de Fuencarral 40, 28004 Madrid, Spain) are evaluated based on the milestone-based delivery model. Completed milestones are non-refundable.

2. Pre-Service Cancellation
If a project is cancelled before work has commenced, a full refund will be issued within 14 business days. Cancellations within 48 hours of project start may be eligible for a 90% refund minus administrative costs.

3. Partial Refunds
If a project is cancelled mid-delivery, the Client is entitled to a refund proportional to unbilled milestones. Completed and accepted deliverables are invoiced at the agreed rate. Any advance payments exceeding completed work will be refunded within 30 days.

4. Service Dissatisfaction
If the delivered service materially deviates from the agreed Statement of Work, the Client may request re-performance within 14 days of delivery. If re-performance is not feasible, a partial or full refund will be negotiated in good faith.

5. Subscription Services
For ongoing services (e.g., SOC monitoring, DLP management), the Client may cancel with 30 days written notice. The current billing period will be honored. No pro-rata refunds apply for partial months of service already rendered.

6. Non-Refundable Items
The following are non-refundable: (a) third-party licensing fees already incurred, (b) completed penetration testing engagements, (c) compliance audit reports already delivered, and (d) emergency incident response services.

7. Refund Process
Refund requests must be submitted in writing to [email protected] within 30 days of the invoice date. Refunds are processed within 14 business days of approval via the original payment method.

8. Dispute Resolution
Any disputes regarding refunds will be handled in accordance with Spanish consumer protection law and EU Directive 2011/83/EU. Clients may also contact the European Consumer Centre (ECC) for mediation.