Privacy policy

This site collects the minimum data needed to respond to your inquiry: name, email, and a project description. We don't use cookies, we don't track you, and we don't share your data with anyone. We use Umami to understand aggregate site usage without identifying anyone. What follows is the required legal information.

Data controller

  • Sebastián Unda Endara – Tax ID: 54395488M
  • Teresa Bolaños Ríos – Tax ID: 52838033H
  • Owners of the registered trademark Elastic Design®.

1. Scope

This website collects personal data only through the contact form. The data provided is used exclusively to respond to enquiries and manage potential professional relationships.

Initial contact may also take place via LinkedIn, through connection requests or messages on that platform. Information shared on LinkedIn is subject to that network's privacy policy.

Once a professional or project relationship is established, subsequent communication and management will take place via email and other channels necessary for the provision of our services.

2. Processing activities

Contact form (website)

  • Data: Name, email address, project description, and professional role.
  • Platform: Firebase (Google Cloud).
  • Purpose: Responding to enquiries from potential clients.
  • Legal basis: Consent (Art. 6.1.a GDPR).
  • Retention: Data is stored in Firestore and deleted after 12 months if no commercial relationship is established.

Project communication and management (email)

  • Data: Full name, tax ID (only if provided for invoicing), email address, and postal address (where applicable).
  • Platform: Google Workspace.
  • Purpose: Management and follow-up of agreed projects. Issuing and sending invoices.
  • Legal basis: Contract performance (Art. 6.1.b GDPR). Legal obligation compliance (Art. 6.1.c GDPR).

Receipt of supplier quotes (email)

  • Data: Contact name, tax ID, email address, and commercial data.
  • Platform: Google Workspace.
  • Purpose: Negotiation, contracting, and management of services.
  • Legal basis: Legitimate interest (Art. 6.1.f GDPR).

3. Data retention

  • Contact form: 12 months from receipt if no commercial relationship is established.
  • Communication and invoicing: 6 years from the last interaction, for tax compliance and potential claims.
  • Anonymous analytics: 6 months for trend analysis. Data remains fully anonymous.

4. Recipients of disclosures

Data processors:

  • Google Workspace (email, storage, and backups).
  • Firebase / Google Cloud (contact form and hosting).
  • Umami Cloud (analytics).

Legal obligations: Disclosure to competent authorities when required by law or court order.

5. Cookies and other technologies

  • First-party cookies: None.
  • Third-party cookies: None.
  • Analytics: Umami Cloud only, without collecting personal data.

6. Rights of data subjects

You have the right to access your data, rectify inaccurate data, erase it, restrict or object to processing, port your data, and withdraw consent where applicable.

To exercise these rights you may:

  • Send your request via LinkedIn.
  • Write to: privacidad [at] 3lastic.com (replace [at] with @).
  • Use the contact channel provided in the context of your project or invoicing.

If you are not satisfied with the response, you may file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

7. Security measures

Appropriate technical and organizational measures have been implemented to ensure:

  • Confidentiality, integrity, and availability of information.
  • Device encryption and periodic backups.
  • Enhanced authentication (2FA) on Google Workspace.
  • Access control to information.

Last updated: June 2026.