Privacy Policy

1. Data controller

The controller of personal data processed through the dakkda public websites is:

• Controller — DAKKDA SL
• Tax ID (CIF/NIF) — ESB88696315
• Address

  Calle Miquel de Calderó, 7-9
  Bloque 3, Piso 3, Puerta 2
  08328 Alella (Barcelona)
  Spain

• Privacy contact — security@dakkda.com

This privacy policy applies to visitors of the dakkda marketing website (dakkda.com) and help center (help.dakkda.com), and to individuals who contact dakkda through demo requests or other inquiries. Use of the dakkda enterprise platform is governed by separate customer agreements and data processing terms.

2. Information dakkda collects

dakkda may collect the following categories of information:

• Contact details — name, work email, company, role, company size, number of cybersecurity solutions, and any message you submit through the dakkda demo request form (marketing site only).
• Technical data — browser type, device information, and IP address / request metadata when you visit dakkda.com or help.dakkda.com (typically via GitLab Pages access logs operated by GitLab). Loading web fonts from Google Fonts may also involve a connection to Google that includes your IP address.
• Preferences — theme preference (light/dark) stored locally in your browser on the marketing site (and read on the help center if previously set).
• Help center search — on-site search on help.dakkda.com runs in your browser against a static index (Pagefind). Search queries are not sent to dakkda or a third-party search analytics service.

dakkda does not intentionally collect special categories of personal data through these public websites.

3. Purposes and legal bases

dakkda processes personal data for the following purposes:

• Respond to demo and sales inquiries — GDPR Art. 6(1)(f) legitimate interests (B2B outreach and relationship management), and where required Art. 6(1)(b) steps prior to a contract.
• Operate and secure the websites — Art. 6(1)(f) legitimate interests (availability, cybersecurity, abuse prevention), including essential functional storage such as theme preference and delivery of documentation on the help center.
• Legal obligations — Art. 6(1)(c) where dakkda must retain or disclose data to comply with applicable law.

4. Sharing and processors

dakkda does not sell your personal data. dakkda uses service providers (processors) to operate the public websites, under instructions and subject to appropriate data protection terms where required.

• GitLab Inc. / GitLab B.V. (GitLab Pages) — hosts and serves the marketing site and help center (GitLab.com Pages). GitLab may process technical data such as IP addresses and request logs to deliver and secure the Sites. See GitLab’s privacy statement and GitLab’s Data Processing Addendum.
• Google LLC (Fonts) — both public sites load the Poppins typeface from Google Fonts. Google may process technical data (such as IP address) when fonts are requested. See Google’s privacy policy.
• Cloudflare, Inc. (Workers + Turnstile) — when the Book a demo form is enabled on the marketing site, Cloudflare processes the submission on a Worker endpoint and runs bot protection (Turnstile) in managed mode (checkbox challenge when needed). Turnstile processes client-side signals (such as IP address and browser/request metadata) solely to distinguish humans from bots. See Cloudflare’s privacy policy, Cloudflare’s Turnstile Privacy Addendum, and Cloudflare’s DPA.
• Google LLC (Gmail API / Google Workspace) — when the Book a demo form is enabled, the intake Worker delivers notifications to demo@dakkda.com using the Gmail API under dakkda’s Google Workspace. See Google’s privacy policy and Google Workspace data processing terms applicable to dakkda’s subscription.

5. International transfers

The public sites are hosted on GitLab.com Pages and load Google Fonts. Demo intake (when enabled on the marketing site) uses Cloudflare Workers/Turnstile and Google’s Gmail API (Workspace). These providers may process personal data in the United States and other countries. Where such processing involves a transfer of personal data from the EEA, United Kingdom, or Switzerland, they rely on appropriate safeguards under the GDPR (including the EU–U.S. Data Privacy Framework and/or Standard Contractual Clauses), as described in each provider’s privacy statement and DPA. dakkda will update this section if processors or regions change.

6. Data retention

dakkda retains contact and inquiry data for as long as necessary to respond to your request, manage the business relationship, or comply with legal requirements — typically up to three years unless a longer period is required by law. Browser-side preferences remain until you clear them. Hosting access logs are retained according to GitLab’s practices for GitLab.com Pages.

7. Your rights

Under the GDPR and Spanish LOPDGDD, you may have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure (“right to be forgotten”), where applicable
• Restrict processing
• Data portability, where processing is based on consent or contract and is automated
• Object to processing based on legitimate interests
• Withdraw consent at any time, without affecting prior lawful processing

To exercise these rights, contact security@dakkda.com. You also have the right to lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (AEPD).

8. Cookies and similar technologies

See the Cookie Policy for theme storage, Google Fonts, help-center search, and, when the demo form is enabled, Cloudflare Turnstile cybersecurity checks. The public sites do not load advertising or embedded third-party media.

9. Changes

dakkda may update this policy from time to time. Material changes will be reflected on this page with an updated “Last updated” date.