Enklask Europa SL attaches the utmost importance to the protection of the personal data of its clients and prospects, and to compliance with the applicable regulations.
This privacy policy informs you of our commitments and the measures we have put in place to guarantee the integrity, security, confidentiality and protection of your personal data, processed in the course of our business, in accordance with the rules set out by the General Data Protection Regulation (GDPR), and any other applicable data protection legislation.
The entity that collects and processes your personal data is Enklask Europa SL, a Spanish limited liability company with a share capital of €10,000, whose registered office is located at Av. Diagonal #601 – Planta #8 – (08028) Barcelona, Spain, represented by Mr. Luc Baumelou, Sole Director.
You can contact us at:
- Administrative matters: Mr. Luc Baumelou – l.baumelou@enklaskeuropa.eu – +33 (6) 1439 2195
- Sales matters: contact@enklaskeuropa.eu – +56 (9) 3065 0052
Personal data we process
In the course of our processing activities, Enklask Europa SL collects and processes the following categories of data:
- Personal identification data (name, surname, addresses, phone number(s), etc.)
- Professional identification data (name, surname, job title, email address)
- Authentication data (usernames, passwords)
- Payment method data (bank details, IBAN, card account information)
- Transaction data (dates, invoices, contracts, history of services used)
- Browsing data (unique identifier, browsing statistics, behavioural data)
- Sensitive data
Legal bases, purposes and retention periods of processing activities
In accordance with the GDPR, the personal data collected by Enklask Europa SL will be used to fulfil the purposes for which it was collected, for the retention periods detailed in the table below:
| Purpose of processing | Legal basis (GDPR) | Retention period |
|---|---|---|
| B2B commercial prospecting (contacts, emails, phone, job titles) | Legitimate interest (Art. 6.1.f GDPR) | 3 years from last active contact or until objection |
| Managing incoming requests (forms, demos, commercial contact) | Pre-contractual measures (Art. 6.1.b) | 3 years from last exchange if no contract is concluded |
| Managing SaaS licence contracts | Performance of contract (Art. 6.1.b GDPR) | Duration of the contract + archiving for 5 years after its end |
| Billing and payment management | Legal obligation (Art. 6.1.c GDPR) | 10 years (accounting and tax obligations) |
| Customer account management (administration, platform access) | Performance of contract (Art. 6.1.b GDPR) | Duration of the contract + deletion within a reasonable technical period after termination |
| Technical support L1/L2 (user assistance, connection, configuration) | Performance of contract (Art. 6.1.b GDPR) | Duration of support + limited archiving (max. 12 months if required for quality monitoring and proof) |
| Prospect management | Legitimate interest (Art. 6.1.f GDPR) | 3 years after last contact or inactivity |
| End-user data (name, email, phone in waiting queue) | Legitimate interest of the client data controller | Duration of the session / video call + automatic deletion within 30 days maximum (unless client obligation) |
| Video call data (image, voice, exchanges) | Performance of contract (Art. 6.1.b GDPR) | Not retained by default or limited to the session duration |
| Video recordings (if enabled) | Explicit consent (Art. 6.1.a GDPR) | 6 months after recording |
| Screen-sharing data | Performance of contract | Not retained or deleted immediately after the session |
| Technical and security logs (IP, connections, errors) | Legitimate interest (IT security) | 6 to 12 months |
| Management of rights exercise requests (GDPR) | Legal obligation (Art. 6.1.c GDPR) | 5 years from the closure of the request |
| Customer contractual data (identity, company, contact) | Performance of contract (Art. 6.1.b GDPR) | Duration of the contract + 5 years in archiving |
Once the indicated retention periods have elapsed, your data will be deleted from all Enklask Europa SL servers.
For more information on the cookies used by Enklask Europa SL, please refer to our cookie policy.
Mandatory or optional nature of data collection and consequences of non-provision
When collecting your personal data, we inform you whether certain data must be provided mandatorily or whether it is optional.
Mandatory data is necessary for the operation of our services and the proper performance of the contract, and will be indicated as such. Failure to provide a mandatory data field will prevent Enklask Europa SL from delivering its services.
Optional data is data you may choose to provide in order to improve your user experience (e.g. communication preferences). Failure to provide this data will have no impact on the performance of the contract or the delivery of the service, but may limit the personalisation of our offering.
Recipients of personal data
The personal data we process is used solely for previously determined purposes, necessary for the delivery of our services in connection with our business.
The following parties have access to your personal data:
- Enklask Europa SL staff, in accordance with internal authorisation policies.
- Our processors, i.e. all digital or non-digital service providers that process your data for specific purposes.
- Authorised sub-processors.
- Public bodies and supervisory or authorisation authorities upon their request or to fulfil our legal obligations, as well as judicial authorities, legal auxiliaries in the context of judicial proceedings, ministerial officers and debt collection bodies.
Your data is also shared with supervisory services (statutory auditors, in particular).
International transfers
Some of your data may be transferred to companies outside the European Union or a country with an adequate level of protection.
Where data is transferred to a country whose level of data protection has not been recognised as adequate under the GDPR, such transfers are based on appropriate safeguards as referred to in Article 46 of the GDPR, adapted to each provider, in particular through the conclusion of standard contractual clauses approved by the European Commission.
Your rights over your data
Under data protection regulations, you have the following rights:
Right of access
You have the right to request information about the nature of the processing carried out, the origin or type of data collected, as well as copies of all information we hold about you.
Right to rectification
You have the right to request the rectification of information you consider inaccurate. You also have the right to ask us to complete information you consider incomplete.
Right to erasure (right to be forgotten)
You have the right to request the deletion of your personal data in certain specific situations.
Where your data is processed on the basis of your consent or the legitimate interest of Enklask Europa SL, you may obtain the early deletion of your data. To exercise this right, you simply need to inform us of your wish to withdraw your consent or to assert your right to object to the processing of your data.
Outside the exercise of this right, your data is automatically deleted upon expiry of the retention period mentioned above.
Right to restriction of processing
This right gives you the ability to suspend the processing of your data after submitting a rectification request, for example. Where you have concerns about the lawfulness of one of our processing activities, this right allows you to ask our teams to cease processing your data without deleting it. In addition, if you wish to bring legal proceedings to assert, exercise or defend your rights, this right also allows you to "freeze" your personal data.
Right to object
You have the right to object to the processing of your personal data in certain circumstances.
The right to object allows you to refuse to be included in a data processing activity. You may object to any processing of your personal data and request its deletion, unless the company can demonstrate a compelling legitimate reason for the processing, or it is necessary for the establishment, exercise or defence of legal claims.
With regard to direct marketing communications sent by Enklask Europa SL, you may withdraw any consent previously given in order to stop receiving such communications.
This right may be exercised at any time and will be brought to your attention in any messages you receive from Enklask Europa SL.
Right to data portability
This right gives you the ability to request access to your personal data, provided that such data is subject to processing based on your consent or within the framework of a contractual relationship. This data will be provided to you in a technically usable format, either by yourself or by another entity other than Enklask Europa SL.
How to exercise your rights
To exercise your rights, please visit the following page:
https://monexpertrgpd.com/exercice-des-droits/?client=Enklask%20Europa
For any questions relating to the protection of personal data, you can contact our Data Protection Officer (DPO):
- Name: Mon Expert RGPD
- Email: conformite@monexpertrgpd.com
The exercise of your rights will be handled by our company in accordance with a defined procedure, which you can consult at the following link:
https://sharing.clickup.com/9012387650/wb/h/8cjw7u2-10272/526a5c2b207a6b5
Complaint to the AEPD
If you believe, after having contacted us, that your rights are not being respected, you may lodge a complaint with the Agencia Española de Protección de Datos (AEPD).
Effective date
We reserve the right to modify this policy, in whole or in part, at any time.
This version of the Enklask Europa SL privacy policy came into effect on 12 May 2026.
Enklask Europa SL – Av. Diagonal #601 – Planta #8 – (08028) Barcelona – España