Privacy Policy

Personal data we process

When you visit the website

We use Cloudflare Web Analytics to understand how the website is used. Cloudflare processes technical visit data, including the IP address and browser user-agent. To count unique visits without using a cookie, Cloudflare derives a value from this data, converts it to a hash and discards the original values. It records the pages viewed, the country the visit came from, the type of device used, the referring website and page load times. Vertai receives aggregate data only.

Our hosting provider also records standard technical information about requests to the website, including IP addresses, for security and abuse prevention.

Legal basis: processing necessary for website analytics and security and abuse prevention is based on our legitimate interest under Article 6(1)(f) of the General Data Protection Regulation. Our legitimate interests are understanding how the website is used, maintaining its security and preventing abuse.

When you book a call

The contact page provides a booking calendar operated by Microsoft Bookings. The calendar does not load when the page opens; it appears only when you click “Book a call”. If you use it, you provide your name, email address, selected appointment time and anything you add in the notes field. We use this information to arrange and hold the call.

Legal basis: processing is necessary to take steps at your request prior to entering into a contract, under Article 6(1)(b) of the General Data Protection Regulation.

When you email us

When you email us, we receive your email address, your message and anything else you choose to include. We use this information to reply and to keep a record of the correspondence.

Legal basis: processing is based on our legitimate interest under Article 6(1)(f) of the General Data Protection Regulation in responding to communications we receive and keeping a record of correspondence.

The website has no user accounts, registration, login or contact form.

Legal claims and legal obligations

We may also process personal data to establish, exercise or defend legal claims and to comply with our legal obligations relating to the processing and retention of personal data.

Legal basis: where processing is necessary to establish, exercise or defend legal claims, it is based on our legitimate interest under Article 6(1)(f) of the General Data Protection Regulation. Where a legal provision requires us to retain or process the data, the legal basis is compliance with a legal obligation under Article 6(1)(c).

How we use data and who we share it with

We do not sell your data, share it with advertising networks, or use automated decision-making or profiling.

We use the following providers to process data on our behalf:

• Microsoft: booking details and email correspondence.
• Cloudflare: website hosting, delivery and analytics.

These providers may process data in, or transfer data to, the United States. Both are certified under the EU-U.S. Data Privacy Framework, which is the mechanism relied upon for these transfers. Where the Data Privacy Framework does not apply, transfers are governed by the European Commission's Standard Contractual Clauses under our data processing agreements with each provider.

Other than these providers, Vertai does not disclose personal data to third parties without your consent.

Data retention

We retain personal data while the purpose remains active, and afterwards for the period during which legal claims or obligations may arise — in particular the commercial, tax and civil prescription periods applicable under Spanish law. Once those periods expire, the data is blocked and then deleted.

Cookies and storage technologies

This website does not use cookies. It also does not use local storage or session storage, or a persistent identifier that allows us to recognise you across visits or across different websites.

We measure website traffic using Cloudflare Web Analytics, which operates without cookies. Because no information is stored on or read from your device, no consent is required for this measurement.

If you choose to open the booking calendar on the contact page, a Microsoft Bookings interface loads within the page. From that point, Microsoft may set cookies and process your data under its own terms, over which Vertai has no control. If you prefer not to use the calendar, you can email us instead.

Your rights

You may exercise the following rights in relation to your personal data: access, rectification, erasure, restriction of processing, objection, data portability and withdrawal of consent where processing is based on consent.

You may exercise these rights by sending a written request to info@vertaitech.com. We may ask you to verify your identity as a security measure to prevent unauthorised disclosure of your personal data. We will respond within one month.

If you believe that the processing of your personal data does not comply with applicable law, you may lodge a complaint with the Spanish Data Protection Agency (AEPD). Where the complaint concerns the exercise of your data-protection rights, you should first exercise those rights with Vertai and may then complain to the AEPD if you do not receive a response within the applicable period or if the response is unsatisfactory.

Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan 6
28001 Madrid
www.aepd.es

Automated decision-making

We do not use personal data processed through this website for automated decision-making or profiling.

Changes to this Privacy Policy

Vertai may amend or add to this Privacy Policy. The latest version will always be available at riskita.com. We may notify users whose contact details we hold of significant changes.

Last updated: 18 August 2026

Download this policy — bilingual Spanish/English version (PDF, 92 KB)