Legal Protocols
EU GDPR compliant documentation for CoreFusionR infrastructure services.
Privacy Policy
1. Data Controller
The data controller responsible for processing your personal data is CoreFusionR, located at Crer. Montserrat 15, Matadepera, Barcelona, España. For any privacy-related inquiries, please contact us at [email protected].
2. Data We Collect
We collect and process the following categories of personal data: identification data (name, email address, phone number), technical data (IP address, browser type, operating system, device identifiers), usage data (pages visited, time spent, interaction patterns), and communication data (messages sent through our contact forms, support inquiries).
3. Legal Basis for Processing
We process your personal data under the following legal bases: (a) Performance of a contract — when processing is necessary for the performance of a contract to which you are a party; (b) Legitimate interest — when processing is necessary for our legitimate interests, such as improving our services, preventing fraud, and ensuring network security; (c) Consent — when you have given explicit consent for specific processing activities; (d) Legal obligation — when processing is necessary to comply with a legal obligation under EU or Spanish law.
4. Data Retention
Your personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Contract-related data is retained for the duration of the contractual relationship plus 5 years as required by Spanish commercial law. Contact form submissions are retained for 24 months from the date of submission.
5. Data Security
CoreFusionR implements state-of-the-art technical and organizational security measures, including AES-256 encryption at rest, TLS 1.3 encryption in transit, multi-factor authentication for all internal systems, regular penetration testing, and continuous monitoring through our 24/7 infrastructure monitoring systems. We maintain SOC 2 Type II compliance and undergo annual third-party security audits.
6. Your Rights Under GDPR
Under the General Data Protection Regulation (EU) 2016/679, you have the following rights: (a) Right of access — you may request a copy of all personal data we hold about you; (b) Right to rectification — you may request correction of inaccurate personal data; (c) Right to erasure — you may request deletion of your personal data where there is no compelling reason for continued processing; (d) Right to restriction — you may request restriction of processing in certain circumstances; (e) Right to data portability — you may request your personal data in a structured, machine-readable format; (f) Right to object — you may object to processing based on legitimate interests; (g) Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.
7. International Data Transfers
CoreFusionR operates within the European Economic Area (EEA). Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or transfers to countries with an adequacy decision.
8. Contact & Supervisory Authority
For any privacy-related requests, contact us at [email protected] or by mail at Crer. Montserrat 15, Matadepera, Barcelona, España. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
Refund Policy
1. Scope
This Refund Policy applies to all infrastructure services, SaaS platform development, and consulting engagements provided by CoreFusionR, located at Crer. Montserrat 15, Matadepera, Barcelona, España.
2. Project Milestone Refunds
For project-based engagements, payments are structured around agreed milestones. If a project is cancelled before a milestone is completed, a refund for that milestone's undelivered portion will be processed within 30 business days. Milestones that have been completed and accepted are non-refundable.
3. Subscription & Retainer Services
Monthly subscription and retainer services may be cancelled with 30 days' written notice. Refunds for prepaid periods will be calculated on a pro-rata basis for the unused portion. Annual subscriptions cancelled within the first 14 days are eligible for a full refund, minus any setup costs incurred.
4. Infrastructure Deployment Deposits
Initial deposits for infrastructure deployment projects are non-refundable once work has commenced. Deposits are applied toward the first billing milestone. If CoreFusionR fails to deliver the agreed scope within the contractually specified timeframe, a full deposit refund will be issued.
5. Refund Process
All refund requests must be submitted in writing to [email protected] with the subject line "REFUND REQUEST — [Project ID]". Refunds are processed within 30 business days of approval via the original payment method. Processing fees charged by payment providers are non-refundable.
6. Dispute Resolution
Refund disputes shall first be addressed through direct negotiation between the parties. If unresolved within 30 days, disputes shall be submitted to binding arbitration under the rules of the Barcelona Chamber of Commerce. This policy is governed by the laws of Spain and the European Union.
7. Contact
For refund inquiries, contact CoreFusionR at [email protected] or at Crer. Montserrat 15, Matadepera, Barcelona, España.
Terms of Service
1. Acceptance of Terms
By accessing or using the services provided by CoreFusionR ("Provider"), located at Crer. Montserrat 15, Matadepera, Barcelona, España, you ("Client") agree to be bound by these Terms of Service. If you do not agree to these terms, you must not use our services.
2. Scope of Services
CoreFusionR provides multi-tenant cloud application architecture, infrastructure deployment, and related consulting services. The specific scope, deliverables, and timelines for each engagement are defined in a separate Statement of Work (SOW) or service agreement executed between the parties.
3. Service Level Agreement
CoreFusionR guarantees a minimum uptime of 99.99% for production deployments, measured monthly. In the event of downtime exceeding this threshold, the Client is entitled to service credits as defined in the SLA addendum. Scheduled maintenance windows are excluded from uptime calculations and communicated with minimum 72 hours' notice.
4. Intellectual Property
All pre-existing intellectual property of each party remains the exclusive property of that party. Custom code, configurations, and infrastructure designs developed specifically for the Client under a project engagement are transferred to the Client upon full payment. CoreFusionR retains the right to use anonymized, aggregate knowledge gained from engagements for internal training and service improvement.
5. Data Ownership & Security
The Client retains full ownership of all data processed through CoreFusionR infrastructure. CoreFusionR shall not access, share, or sell Client data without explicit written consent. All data processing activities comply with the EU General Data Protection Regulation (GDPR) and applicable Spanish data protection laws (LOPDGDD).
6. Limitation of Liability
CoreFusionR's total liability under any engagement shall not exceed the total fees paid by the Client in the 12 months preceding the claim. CoreFusionR shall not be liable for indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or business opportunities, except in cases of gross negligence or willful misconduct.
7. Confidentiality
Both parties agree to maintain the confidentiality of proprietary information exchanged during the course of the engagement. This obligation survives termination of the agreement for a period of 3 years. Confidential information includes but is not limited to: technical specifications, business strategies, pricing, and customer data.
8. Termination
Either party may terminate an engagement with 30 days' written notice. In the event of termination, the Client shall pay for all services rendered up to the termination date. CoreFusionR shall provide reasonable transition assistance for a period of up to 30 days following termination, subject to standard consulting rates.
9. Governing Law & Jurisdiction
These Terms of Service are governed by the laws of Spain and the European Union. Any disputes arising from or related to these terms shall be subject to the exclusive jurisdiction of the courts of Barcelona, Spain.
10. Amendments
CoreFusionR reserves the right to modify these Terms of Service at any time. Material changes will be communicated via email to registered clients at least 30 days before taking effect. Continued use of services after the effective date constitutes acceptance of the modified terms.
11. Contact
For questions regarding these Terms of Service, contact CoreFusionR at [email protected] or at Crer. Montserrat 15, Matadepera, Barcelona, España.