Privacy Policy

Effective date / Last updated: August 2, 2026

1. Introduction and Scope

Futurion Solutions S.L. (“Futurion”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect personal data when you visit our website (https://solutions.futurion.es), submit a contact or Automation Roadmap form, or otherwise interact with us as a prospective or existing client.

This Policy covers our website and commercial relationship with you, and the local-only data handling of the TrustPaste browser extension. Website and business-service processing are distinct from TrustPaste processing: TrustPaste processes the data described in §13, TrustPaste Browser Extension only in your device/browser profile. This Policy does not cover personal data that our clients process using TrustPrompt, TrustCore, or TrustAuto on their own infrastructure — see §12, Products and Client Data below.

We process personal data in accordance with:

Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”)
Spanish Organic Law 3/2018 on Data Protection and Digital Rights Guarantee (“LOPDGDD”)
Law 34/2002 on Information Society Services and Electronic Commerce (“LSSI-CE”), for cookies and commercial electronic communications

2. Definitions

Personal data: any information relating to an identified or identifiable natural person.
Controller: the entity that determines the purposes and means of processing personal data — in this Policy, Futurion Solutions S.L.
Processor: an entity that processes personal data on behalf of the controller (e.g. our hosting or email provider).
Processing: any operation performed on personal data (collection, storage, use, disclosure, deletion, etc.).
Data subject: the individual whose personal data is processed (you).
Website: https://solutions.futurion.es.
Cookies: small files or similar technologies stored on your device (see §6).

3. Data Controller

Futurion Solutions S.L. NIF: B93839587 Calle Lucio del Valle, 10, 6, 46022 Valencia, Spain Contact us via our contact form — we do not publish a direct email address; all inquiries and data protection requests are handled through the form to keep your correspondence in one auditable channel.

4. Personal Data We Collect

4.1 Data you provide to us

When you fill out our contact form or book a free Automation Roadmap, we collect:

Your name
Email address
Phone number
Practice or organization name and type
Number of employees
Description of your needs or challenges, and any other information you choose to include in your message

4.2 Data collected automatically

When you visit our Website, we automatically collect, subject to your cookie consent:

IP address
Browser type and version
Pages visited and time spent
Referring website
Device information

This data is collected through cookies and similar technologies — see §6.

4.3 Data we receive from third parties

Where you interact with our LinkedIn page or ads, the relevant platform (LinkedIn, Meta) may share aggregate engagement or conversion data with us, subject to that platform’s own privacy terms and your consent settings on that platform.

4.4 Data you provide when purchasing online

When you buy a TrustPrompt or TrustCore licence, or pay a TrustAuto deposit, through our online checkout, we collect:

Company name and tax identification number (NIF/CIF)
Billing address
Contact name and email address
The product and plan purchased, and the amount paid

We do not build a customer database of our own for these purchases: this data is sent directly to our invoicing provider, Qonto, to create your invoice and process payment — see §7 and §9.

4.5 Special categories of data

We do not seek to collect special categories of personal data (health data, biometric data, etc.) through this Website. Please do not include such data in a contact form submission unless it is strictly necessary and directly relevant to your inquiry.

5. Purposes and Legal Bases for Processing

Purpose	Legal basis (GDPR Art. 6)
Responding to your inquiry or message	Consent (Art. 6(1)(a)) — given by submitting the form
Scheduling and delivering a free Automation Roadmap	Consent / pre-contractual steps (Art. 6(1)(a) and (b))
Performing a contract once you become a client	Contract performance (Art. 6(1)(b))
Processing an online purchase and issuing an invoice	Contract performance (Art. 6(1)(b))
Verifying payment and preventing fraud	Legitimate interest (Art. 6(1)(f))
Website analytics, security, and improvement	Legitimate interest (Art. 6(1)(f)), cookies only with consent per LSSI-CE Art. 22.2
Marketing communications and ad measurement	Consent (Art. 6(1)(a)), withdrawable at any time
Accounting, tax, and other statutory records	Legal obligation (Art. 6(1)(c))

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

6. Cookies and Tracking Technologies

Our Website uses a cookie consent banner that lets you accept or reject each category before it is loaded, in line with LSSI-CE Art. 22.2:

Essential cookies: required for the Website to function (e.g. theme and consent preference). These do not require consent.
Analytics cookies: Google Analytics 4, used only with your consent, to understand aggregate usage of the Website.
Marketing cookies: the Meta Pixel and the LinkedIn Insight Tag, used only with your consent, to measure and improve our advertising.

You can change or withdraw your cookie consent at any time through the cookie preferences control on the Website, or through your browser settings. Disabling essential cookies may affect Website functionality.

7. Recipients and Processors

We share personal data only with the following categories of recipients, each under a data processing agreement (GDPR Art. 28) where applicable:

Amazon Web Services (AWS), EU region — hosting of the Website and the contact-form submission endpoint.
Microsoft 365 (EU region) — our business email inbox and appointment booking (Outlook Bookings) for Automation Roadmap scheduling.
Qonto (Qonto SAS, France) — invoicing for online purchases and payment processing for bank-transfer orders. Qonto is the data controller for the payment itself; we send it only the checkout data described in §4.4.
Stripe (Stripe Payments Europe, Ltd., Ireland) — card-payment processing for online purchases. Stripe is the data controller for the card payment itself; card details are entered on Stripe’s hosted payment page — we never receive or store your card number.
Google Analytics — website usage analytics, only with your consent.
Meta (Meta Pixel) and LinkedIn (Insight Tag) — advertising measurement, only with your consent.
Legal or public authorities, where required by law.

We do not sell your personal data to third parties, and we do not share it for purposes unrelated to those described in this Policy.

8. International Data Transfers

Our Website hosting and contact-form data are kept within the European Economic Area (EEA) (AWS EU region), and our business email and appointment booking are processed by Microsoft 365 in Microsoft’s European region — none of this data is transferred to the United States. Qonto (France) likewise processes checkout and payment data within the EEA. Stripe (Ireland) is our card-payment processor; Stripe Payments Europe, Ltd. is an Irish company and the data controller for the card payment itself, though card-payment data may be processed by Stripe group entities outside the EEA as part of Stripe’s global infrastructure — where that occurs, the transfer is safeguarded by the European Commission’s Standard Contractual Clauses. Some of our other processors — Google, Meta, and LinkedIn — are based in or transfer data to the United States. Where this occurs, the transfer is safeguarded by the European Commission’s Standard Contractual Clauses and, where applicable, the provider’s certification under the EU–U.S. Data Privacy Framework, as required by GDPR Chapter V.

9. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected:

Contact form and Automation Roadmap submissions: up to 12 months after your last interaction, unless you become a client.
Client data: for the duration of our business relationship, plus the retention periods required by Spanish commercial and tax law (generally up to 6 years for accounting records).
Online purchases: we do not keep our own order database. Your invoice and payment status are retained by Qonto per its own retention obligations (including the statutory accounting period); the fulfilment and internal-notification emails we send are kept in our normal business email, subject to the retention above for client data.
Website analytics data: up to 14 months, in line with Google Analytics’ default retention.

You may request earlier deletion of your data at any time — see §11.

10. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, including:

Encryption of data in transit (HTTPS/TLS)
Access controls and authentication on our systems and processors
Data minimization — we only ask for the fields necessary to respond to your inquiry
Regular review of our security posture and processor agreements

As a data subject, you have the following rights, free of charge, under GDPR Articles 15–22:

Right of access (Art. 15): request a copy of the personal data we hold about you
Right to rectification (Art. 16): request correction of inaccurate personal data
Right to erasure (Art. 17): request deletion of your personal data (“right to be forgotten”)
Right to restrict processing (Art. 18): request limitation of how we process your data
Right to data portability (Art. 20): receive your data in a structured, commonly used, machine-readable format
Right to object (Art. 21): object to processing based on our legitimate interest, including direct marketing
Right to withdraw consent: withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal

To exercise any of these rights, please use our contact form. We will respond within one month of your request, as required by GDPR Art. 12(3).

If you believe your rights have been infringed, you may lodge a complaint with the Spanish Data Protection Agency:

Agencia Española de Protección de Datos (AEPD) C/ Jorge Juan, 6, 28001 Madrid Website: www.aepd.es

12. Products and Client Data

TrustPrompt, TrustCore, and TrustAuto are designed to run on infrastructure that our clients control. When a client uses our products to process personal data of their own users, patients, or employees, that data stays on the client’s infrastructure and the client is the data controller for that processing. Where Futurion processes such data on the client’s behalf (for example, during deployment, support, or maintenance), that processing is governed by a separate data processing agreement (GDPR Art. 28) with the client, not by this Policy.

TrustPaste is governed separately by §13, TrustPaste Browser Extension.

13. TrustPaste Browser Extension

TrustPaste lets you select values from JSON data that you import and inserts a selected value only into a field that you select. Because imported JSON is arbitrary, it may contain personal, financial or payment, health, authentication, communications, location, browsing or activity, website-content, user-generated, or other data that you supply. You are responsible for ensuring that you have the authority to import and use that data; TrustPaste does not technically prevent these categories from appearing in arbitrary JSON.

Imported profile data, the source filename, preferences, favourites, recent-path metadata, and your privacy-policy acknowledgement are stored only in Chrome extension local storage (chrome.storage.local) in your device/browser profile. TrustPaste has no account, cloud sync, telemetry, analytics, advertising, remote code, or third-party network transmission. Its packaged stylesheet lookup is local.

When you explicitly invoke TrustPaste, it temporarily reads the editable-field and nearby page or form context needed to rank values and make the requested insertion. This can include page and form metadata and existing field content where cursor insertion requires it. That context is not transmitted or retained as a separate record.

Processing is exclusively local: search, ranking, preview, favourites and recent functionality, and the insertion you request. TrustPaste does not submit forms, click buttons, accept terms, interact with CAPTCHAs, or insert into password or payment fields.

Futurion does not receive TrustPaste profile or page/form data and does not sell, rent, share, or transfer it. Website cookies, analytics, advertising tags, contact-form processing, AWS, Microsoft 365, Stripe, Qonto, Google Analytics, Meta, LinkedIn, and other website or business-service providers do not apply to TrustPaste.

You can use Reset TrustPaste, the individual profile, history, or favourites controls, or remove the extension. Removing the extension clears its isolated extension local storage; exported files remain under your control. The controller identity, contact form, and GDPR-rights process in this Policy apply to TrustPaste questions and requests.

14. Children’s Privacy

Our services are business-to-business and not directed at, or intended for, minors. In accordance with Spanish law (LOPDGDD Art. 7), the minimum age for a minor to independently consent to data processing based on consent is 14 years. We do not knowingly collect personal data from anyone under that age through this Website.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be posted on this page with a revised “Last updated” date.

16. Contact Us

If you have questions about this Privacy Policy or want to exercise your data protection rights, please use our contact form. We will respond within one month.

Location: Calle Lucio del Valle, 10, 6, 46022 Valencia, Spain