LEGAL INFORMATION
privacy policy
Last updated: 29 October 2026.
1. Controller
- Controller: ERYON LLC (Delaware, USA), trading as Talo Tech. Delaware File Number 10403178. EIN 38-4377073.
- Registered office: 1201 Orange Street, Suite 600, Wilmington, DE 19801, United States.
- Privacy contact: martinb@talotech.xyz [PENDING-EMAIL]
ERYON LLC is established outside the European Union. The GDPR applies to it under article 3.2 because it offers services to people in the EU and measures website usage. Because the processing is occasional, does not include special categories of data at large scale and is unlikely to create a risk to individuals' rights, ERYON LLC has not designated a representative in the Union under article 27.2.a. You can exercise your rights through the contact channel indicated and complain to the competent supervisory authority, for example the AEPD (aepd.es).
2. What data we process, why, and on what basis
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Replying to people who email us | Name, email, company, role and message content | Legitimate interest in answering the enquiry (art. 6.1.f GDPR) and, where the enquiry is about hiring us, pre-contractual steps (art. 6.1.b) | For the conversation and up to 12 months after the last contact, unless it becomes a contract |
| Managing client and supplier relationships | Business contact details of contact persons, and billing data | Performance of a contract (art. 6.1.b) and accounting and tax obligations (art. 6.1.c) | For the contract, then for the period required by applicable tax and corporate law |
| Measuring site use (Google Analytics 4) | Browsing data described in the Cookie policy | Consent (art. 6.1.a GDPR and art. 22.2 LSSI) | 2 months at user and event level |
| Site security | Server technical logs (IP, date, resource requested) | Legitimate interest in protecting the site (art. 6.1.f) | The hosting provider's log retention period |
We do not make automated decisions with legal effects about you or build profiles from this data. We do not sell personal data.
[PENDING-OUTBOUND: if B2B prospecting is approved, add the purpose, data source (art. 14 GDPR), legitimate-interest basis with its balancing test, and the right to object.]
3. Who we share data with
Only with providers that process data on our behalf (processors), under contracts that meet art. 28 GDPR:
- Vercel Inc. (USA): site hosting.
- Google Ireland Ltd and Google LLC: Google Analytics 4, only if you accept.
- [PENDING-PROV: email provider for talotech.xyz and any CRM or form provider.]
We may also disclose data to authorities when the law requires it.
4. International transfers
ERYON LLC is based in the United States, as are some of its providers. When we send data to the US, we use providers certified under the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov/list) or standard contractual clauses approved by the European Commission. You can ask us for more information at the contact email.
5. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to martinb@talotech.xyz [PENDING-EMAIL]. We may ask for reasonable information to verify your identity. We reply within one month. Where processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of earlier processing.
6. Complaints
If you think we have mishandled your data, you can complain to the Spanish Data Protection Agency (https://www.aepd.es) or to the data protection authority of your EU country of residence.
7. Security
We apply technical and organisational measures proportionate to the risk: encryption in transit, least-privilege access control and periodic supplier reviews.
8. Changes
If we change this policy, we will publish the new version and its date on this page.