Privacy policy
Last updated: July 2026
Who we are
EAA Comply ("we") provides web accessibility audit services. The data controller is the site owner identified in the legal notice (trade name Potencia Digital). Contact: hello@eaacompliance.com. This policy explains how we process personal data under the EU General Data Protection Regulation (GDPR).
What we collect and why
- Free scan form: the website URL you submit and your email address. Purpose: to run the accessibility scan of the URL you provide, generate your report and email it to you. Legal basis: your consent (Art. 6(1)(a) GDPR), given when you tick the privacy checkbox and submit the form; you can withdraw it at any time by emailing us. Retention: scan requests, reports and the associated contact data are kept for up to 12 months, then deleted. We do not use this data for any other purpose (no newsletter, no resale, no profiling).
- Email correspondence: your email address and message content, to answer you and provide our services (Art. 6(1)(b) GDPR, pre-contractual and contractual steps).
- Server logs: IP address and technical data kept briefly for security purposes (Art. 6(1)(f) GDPR, legitimate interest).
How the scan form is processed
Form submissions are handled by n8n, an automation platform self-hosted on our own virtual private server located in the European Union (infrastructure provider: Hostinger International Ltd., acting as hosting provider under a GDPR data-processing agreement). Your data does not leave the EU/EEA. The form also includes an invisible anti-spam field; it collects no data from human visitors.
What we do NOT do
- No advertising or tracking cookies. No analytics that identify you (see the cookie policy).
- We never sell or share your data with third parties for marketing.
- No automated decision-making with legal effects, no profiling.
Retention
Scan requests and reports: up to 12 months, then deleted. Correspondence: as long as needed to serve you or as required by law (e.g. tax records for invoiced services).
Your rights
You can request access, rectification, erasure, restriction, portability, object to processing, or withdraw consent at any time: hello@eaacompliance.com. You may also lodge a complaint with your national data protection authority (in Spain, the AEPD, www.aepd.es).
Processors
Our infrastructure runs on EU-based servers (VPS hosted by Hostinger, EU data centre). Email delivery may use a transactional email provider under a GDPR data-processing agreement. No transfers outside the EU/EEA take place; if that ever changes, this policy will list the safeguards first.