Privacy policy

All personal data processed through this site is controlled by the entity below. You can contact the controller for any of the rights listed further down.

Entity

2Coders Studio SL

Tax ID (CIF)

B76173442

Registered address

C/ Hermanos Dominguez Santana, 12 Local D, 35018 Las Palmas de Gran Canaria, Spain

Mercantile registry

Mercantile Registry of Las Palmas · Page GC-47707 · Volume 2072 · Page 1

Email

[email protected]

Phone

+34 828 78 33 93

For privacy-specific enquiries or to exercise any of the rights below, email [email protected] with "Privacy - Arena" in the subject line.

Contact-form submissions

When you submit the form on /contact, HubSpot collects and stores the identification and contact data you provide - typically name, work email, company, role, and the project description you write.

Technical logs

The web server records standard access logs: IP address, user agent, timestamps, requested URL. These are kept up to 30 days for security and abuse prevention, then automatically rotated. They are not shared with third parties.

Usage analytics

If you explicitly allow analytics, this site uses Google Analytics 4 to collect page paths and titles, referrers without query strings, session statistics, approximate location, browser/device information, demo-button and contact-method selections, successful form-submission status, and broad ROI-calculator configuration bands under a pseudonymous client identifier. The analytics tag is blocked until you opt in. We do not send contact-form values, email addresses, exact commercial inputs, search text, or other raw user content to Analytics, and advertising storage and personalization remain disabled.

• Contact-form data - user consent plus pre-contractual necessity. GDPR Art. 6(1)(a) + 6(1)(b).
• Technical access logs - legitimate interest in site security and abuse prevention. GDPR Art. 6(1)(f).
• Strictly-necessary storage - legitimate interest in serving the site and remembering privacy choices; exempt where permitted under ePrivacy rules.
• Usage analytics - your explicit consent under GDPR Art. 6(1)(a) and applicable ePrivacy rules. Analytics remains off unless you opt in.

We follow strict service-provider selection criteria and sign data-processing contracts with every sub-processor.

We do not sell, rent, or otherwise share personal data beyond these sub-processors and what is strictly required by Spanish law.

• Contact-form data: kept for the duration of the engagement conversation plus 24 months, then deleted from the CRM.
• Technical access logs: 30 days.
• Analytics user- and event-level data: deleted according to the retention period configured in the Google Analytics property; aggregated reports may remain after that period.

You can withdraw analytics consent at any time using the Cookie settings control in the site footer. You can also email the controller.

You may exercise any of the rights below by emailing [email protected] from the address you used on the form, with proof of identity where reasonable. We respond within 30 days.

• Access, rectification, erasure
• Restriction of processing and opposition
• Portability
• Withdraw consent at any time
• Lodge a complaint with the Spanish Data Protection Agency (AEPD, aepd.es)

The site uses TLS end-to-end so transmitted information is encrypted in transit. The hosting server runs on AWS with encrypted volumes and rotating backups. Access controls are role-based, audit-logged, and aligned with ISO 27001 operational standards at 2Coders Studio.

No security measure on the internet is impregnable. We take every reasonable precaution; we cannot guarantee absolute security.

Material changes are announced at the top of this page with a new "Last updated" date. Historical versions are available on request.