Privacy

Privacy policy

Version 1.0 · September 2026

1. Data controller

Data controllerFAST FORWARD REWIND STRATEGIES, S.L.
Tax ID (NIF)B88612734
Registered addressC/ Puente la Reina, 58, 28050 Madrid
Privacy contactcontact@keevaris.com
Phone+34 630 878 976
DPONo specific Data Protection Officer has been designated.

2. Dual role: controller and processor

As controller: visitors, contacts, leads, demos, customer representatives and users, commercial communications, contractual/billing data and security.

As processor: data that an operator manages within Keevaris on its own behalf, including customers, leads, tenants, contacts, contracts, billing, payments, communications, incidents and access. The operator is the controller and Keevaris acts under its instructions and the Article 28 GDPR DPA.

Requests relating to data processed on behalf of an operator should be directed primarily to the operator acting as controller.

3. Purposes, legal bases and retention

PurposeData / basis / retention
Contact and demosIdentification, professional contact details, company, role and enquiry. Pre-contractual measures, consent and/or legitimate interest. For the duration of handling and reasonable follow-up.
B2B contractual relationshipRepresentatives, users, billing and communications. Contract and legal obligations. Contract duration + legal retention periods.
Service provision and supportAccount, authentication, activity, configuration and incidents. Contract and legitimate interest in security/operation. Relationship duration + liability periods.
B2B marketingName, company, role, email and preferences. Consent where required and/or legitimate interest under LSSI/GDPR. Until objection or withdrawal.
Security and auditIP address, logs, identifiers and events. Legitimate interest and, where applicable, legal obligation. Proportional retention period.
Tax/accountingTax data, invoices and payments. Legal obligation/contract. Commercial and tax retention periods.
Operational dataData determined by the operator. Basis and retention determined by the controller; Keevaris acts as processor.

4. Artificial intelligence and automation

Keevaris may incorporate AI and automation to analyse operational information, detect signals, generate recommendations, prepare actions, assist users and, where configuration and permissions allow, execute certain tasks. When these functions process data on behalf of an operator, the operator's instructions, permissions, purposes and contractual safeguards will apply.

Keevaris is designed under human supervision and governance. It is not generally claimed that it makes decisions based solely on automated processing with legal or similarly significant effects. If a specific feature could fall under Article 22 GDPR, it must be configured and documented in accordance with the regulation.

5. Providers, transfers, rights and security

Providers of cloud, communications, support, analytics, security, payments, access, email, integrations and AI may be used. Sub-processors will be documented in the applicable DPA or register. Processing within the EEA will be prioritised where possible, and international transfers will use the applicable legal safeguards. Data subjects may exercise their rights by writing to contact@keevaris.com and may lodge a complaint with the Spanish Data Protection Agency (AEPD). Technical and organisational measures appropriate to the risk will be applied.

Have a question about your data? Write to us at contact@keevaris.com.