Boottrace

Privacy policy

We only process the data you send us through the form or by email, and the firmware files you deliver for a contracted analysis. Anonymous, cookie-free visit measurement, and no sharing with third parties for commercial purposes.

Controller

  • Owner: Antonio Quesada Frías (trading as Boottrace)
  • Tax ID (NIF): 47874985W
  • Address for notices: C/ Llobregós 3, sobreático, 08032 Barcelona, Spain
  • Email: [email protected]

What data we process and why

Contact form and email. Name, email, company, website, technical platform, CRA status and the content of your message. Purpose: answering your enquiry and preparing a proposal if you ask for one. Submissions are received and stored on our own servers (contact management system) and reviewed by a person before we reply; an in-house AI tool may draft a reply, with no automated decisions affecting you. We do not use this data for advertising or newsletters.

Client firmware and artefacts. When you order a Quick Scan, an audit or another service, you deliver firmware images that may contain personal data (for example, usernames). They are processed exclusively for the contracted analysis, encrypted at rest, and deleted 30 days after the report is delivered unless you are on a continuous compliance contract.

Technical connection data. The hosting provider records the IP address and the requested page in access logs for the security and operation of the service, for a limited period.

Legal basis

  • Form and email: your consent when sending the message (article 6.1.a GDPR) and, when you ask for a proposal, pre-contractual measures at your request (article 6.1.b).
  • Client firmware: performance of the contract (article 6.1.b).
  • Technical logs: legitimate interest in the security of the service (article 6.1.f).

Retention

Contact messages are kept while the conversation lasts and for at most two years after the last contact. If the relationship becomes a contract, the legal retention periods for commercial and tax records apply. You can ask for earlier deletion at any time.

Who receives the data

  • Google (Gmail): mailbox where we receive and answer messages, covered by standard contractual clauses and the EU-US Data Privacy Framework.
  • Cloudflare: hosting and delivery of this site, with servers in the European Union and standard contractual clauses.
  • Stripe Payments Europe, Ltd. (Ireland): payment of the Quick Scan; processes the payment and billing details you enter at checkout. We never see or store card details.
  • Hetzner Online GmbH (Germany): servers where firmware analyses are processed.

We may also disclose data to authorities when the law requires it.

Your rights

You can exercise at any time your rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent, by writing to [email protected]. We reply within one month at most. If you believe we have not handled your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Cookies

This site uses no tracking cookies. Details in the cookie policy.

Visit measurement

We measure visits with Umami, installed on our own server in the European Union. It uses no cookies and does not store your IP address: it uses it, together with browser data, to compute an anonymous identifier that changes every month and cannot recognise you from one month to the next. We only get aggregate data: pages viewed, the site you came from, country and approximate city, device type and browser, and whether you click buttons such as “Book”. It is not shared with anyone. The legal basis is our legitimate interest in knowing which content is useful.

Last updated: 6 October 2026.