Privacy Policy

1. Who Is Responsible for This Website (Data Controller)

This website is operated by:

BEYOND MINDSET, S.L. is the data controller responsible for the personal data described in this Privacy Policy.

2. What This Policy Covers

This policy covers only the processing of personal data that happens through this website: visiting its pages, the cookie banner, and the contact links on it. If you become a client, the processing of the information you share with us in calls and sessions is described separately, in the Client Privacy Notice you receive with the client agreement.

3. Data Processed When You Visit

This website is a set of static pages hosted on Vercel. Visiting it involves the following processing:

• Hosting logs: our hosting provider, Vercel, automatically records server access logs, including your IP address, for a short period. These logs are used for security and to deliver the website reliably.
• Analytics, after consent: we use Google Analytics 4 (GA4) to understand how visitors use this website, for example which pages are viewed and how visitors arrive at the site. GA4 does not run by default and only loads after you actively accept cookies in the banner shown on your first visit. See section 9 for how this works.

This website has no forms, no accounts, no newsletter, and no payments. It does not ask you to type in any personal data.

4. Legal Bases

We process the data described in section 3 on the following legal bases under the GDPR:

• Legitimate interests (Article 6(1)(f)): for hosting and server access logs, to keep the website secure and working properly.
• Consent (Article 6(1)(a)): for Google Analytics 4, which only runs after you accept cookies in the banner. You may withdraw this consent at any time; see section 9.

5. Booking a Call and Contacting Us

This website links to email (a mailto link), to a phone number (a tel link), and to an external Calendly page to book a free exploration call. If you use the email or phone link, we process the details you send us to answer you, on a contract or pre-contract legal basis (Article 6(1)(b)), since you are asking about our services.

If you book a call through Calendly, you enter your own details directly on Calendly's page. Calendly is a separate data controller with its own privacy policy, and this website does not pass any data to it. Please review Calendly's own privacy policy for how it handles your booking details.

6. Recipients and International Transfers

We do not sell your personal data. The following providers process data described in this policy on our behalf or as separate controllers:

• Vercel: hosts this website and processes server access logs.
• Google Ireland Ltd: provides Google Analytics 4, which only runs after you consent.
• Calendly: processes the booking details you enter directly on its page, as a separate controller.

Some of these providers may process personal data outside the European Economic Area. Where this happens, the transfer relies on a mechanism permitted by Chapter V of the GDPR, such as a European Commission adequacy decision or Standard Contractual Clauses. Write to sebastian@integratesoma.com for information about the safeguard applicable to a particular transfer.

7. Retention

• Hosting logs: retained for the period set by Vercel, our hosting provider.
• Analytics data: retained as configured in Google Analytics.
• Contact emails: kept for as long as needed to handle your request. If you become a client, any further retention of your information is described in the Client Privacy Notice you receive with the client agreement.

8. Your Rights

Under the GDPR and Spain's LOPDGDD (Organic Law 3/2018), you have the right to:

• Access the personal data we hold about you.
• Request rectification of inaccurate or incomplete data.
• Request erasure of your data ("right to be forgotten").
• Request restriction of how we process your data.
• Request portability of your data where the conditions of Article 20 GDPR apply.
• Object to processing based on our legitimate interests.
• Withdraw consent at any time where processing is based on consent, for example analytics cookies, without affecting the lawfulness of processing before withdrawal.
• Lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), www.aepd.es, if you believe your data protection rights have been infringed.

To exercise these rights, contact us atsebastian@integratesoma.com.

9. Cookies

This website uses Google Analytics 4 (GA4), a web analytics service provided by Google, and no other cookies or trackers.

GA4 does not run by default. We use Google's Consent Mode in its basic configuration, which keeps analytics storage denied and does not load Google Analytics until you actively click Accept in the cookie banner shown when you first visit this site. If you click Reject, or close the banner without accepting, analytics storage stays denied and GA4 does not load.

When you accept, Google Analytics sets the cookies _ga and _ga_ followed by an identifier. They distinguish visitors and sessions and expire after two years.

Your choice is stored in your browser. You can change it at any time using the Cookie settings link in the footer of every page. Withdrawing consent is as easy as giving it.

This website uses self-hosted fonts, so no font files are requested from Google or any other third party.

10. Changes

We may update this policy periodically. Any changes will be posted here, and we encourage you to review this page regularly.

11. Contact

If you have any questions about this Privacy Policy, or to exercise any of the rights described above, you can contact us at: