This English version is a translation provided for information. The Spanish version is the one that applies and prevails in case of discrepancy. The portals are in Spanish and are intended for people living in Spain.
- The controller of your data is DATAGROWT SYSTEMS, S.L..
- We only share your data with the companies on the Portal’s list of recipients, and only if you authorise it.
- First, we check with an SMS code that the phone is yours.
- Your authorisation expires after 12 months and you can withdraw it whenever you like, for all companies or just some. We tell those that already have your data.
- We do not sell or rent lists and we do not add data about you from other sources.
- For any question or to exercise your rights: privacidad@datagrowtsystems.com.
1. Data controller
| Company name | DATAGROWT SYSTEMS, S.L. |
|---|---|
| Tax ID (NIF) | B27650928 |
| Registered office | Calle Gonzalo Tejero Langarita, 20, 46026 València (Valencia), España |
| Registration details | Registered in the Commercial Register of Valencia, Section 8, Sheet V-234235, 1st entry (electronic folio, IRUS 1000471991989) |
| Contact email | hello@datagrowtsystems.com |
| Privacy email | privacidad@datagrowtsystems.com |
| Phone | +34 674 297 638 (Monday to Friday, 9:00 to 18:00 CET, in Spanish) |
2. Scope
This policy applies to the data collected on the tellamamos.es portals and their subdomains (“the Portals”), listed in the Annex. Each Portal also has its list of recipient companies at its /cesionarios address.
The tellamamos.es home page has no forms and uses no cookies. Like any website, the server records technical data of each visit (IP address, date and page) for security and operation.
3. The service
On the Portals you ask companies in a sector (alarms, insurance and others) to contact you and present their proposal. DataGrowt does not sell or contract those products or advise on them: it collects your request, verifies it and passes it on to the companies you authorise. The service is free for you.
4. Data we process
| Category | Data | Source |
|---|---|---|
| Identification and contact | Name and surname, mobile phone, email and postcode | You, in the form |
| Your request | Portal, answers to the sector questions and preferred time slot | You, in the form |
| Verification and evidence | Date and time of each step, IP address, browser and device, page and source of the visit, exact text of each accepted checkbox with its digital fingerprint (SHA-256), version of the list of recipients and result of the SMS verification | Generated when you use the Portal |
We do not ask for health data or other special categories of data, or for bank details. We do not add data about you from other sources and we do not buy databases. Fields marked as mandatory are needed to process your request.
5. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Managing your request: receiving the form, verifying your phone with an SMS code and dealing with your questions and incidents. The verification SMS is a service message, with no advertising. | Your request and the provision of the service you ask for (art. 6.1.b GDPR) |
| Sharing your data with the recipient companies of the Portal so they can present their proposal through the channels stated in the checkbox. | Your consent (art. 6.1.a GDPR; art. 21 LSSI; art. 66 of Spanish Law 11/2022 on Telecommunications) |
| DataGrowt’s own communications about other Portals, only if the Portal offers you that checkbox and you tick it. | Your consent (art. 6.1.a GDPR; art. 21 LSSI) |
| Keeping evidence of your request, your consents and their withdrawal, and dealing with complaints or requests from authorities. | Legal obligation to be able to demonstrate consent (arts. 5.2 and 7.1 GDPR) and legitimate interest in defending against claims (art. 6.1.f GDPR) |
| Preventing fraud: detecting automated forms, false data, other people’s data or duplicate requests. | Legitimate interest of DataGrowt, the companies and the people themselves in not using the data of someone who did not ask (art. 6.1.f GDPR) |
| Statistics on how the Portals work, with aggregated or anonymised data. | Legitimate interest (art. 6.1.f GDPR) |
You can ask for the legitimate interest assessment at privacidad@datagrowtsystems.com. Your request never depends on accepting DataGrowt’s own communications.
6. How your authorisation works
- You see who you authorise. Next to the sharing checkbox is the link to the Portal’s list of recipients, with each company’s name, tax ID and privacy policy. The checkbox is not pre-ticked. If the Portal lets you choose company by company, your data is only shared with those you tick.
- You know how they will contact you. The checkbox states the channels (phone call, SMS, WhatsApp or email).
- We verify your phone. We send you a code by SMS from the sender “TeLlamamos”. We only share your data once you confirm it.
- It expires. Your authorisation expires 12 months after you gave it.
- What we require of the companies by contract: use your data only to present their proposal for the Portal’s sector; not pass it on, rent it or sell it; identify themselves and tell you where your data came from on first contact; call only within legal hours and from identifiable numbers; respect your refusal immediately; and stop contacting you when we tell them you have withdrawn your permission.
Each company is the controller of the processing it carries out from the moment it receives your data, and will inform you about it in its first communication.
7. Recipients
a) Recipient companies. Only those on the Portal’s list in force when you gave your authorisation, and only if you gave it. A company added later will not receive your data without a new authorisation.
b) Providers working for DataGrowt (processors), under a contract that obliges them to use the data only to provide their service:
| Service | Provider and location |
|---|---|
| Web hosting | IONOS Cloud, S.L.U., in the European Union |
| Request management platform | AffiliaTracker, DataGrowt’s own software (not a third party) |
| Verification SMS | Messaging operator hired by DataGrowt |
| Service emails | Email provider hired by DataGrowt |
We will give you each provider’s name and location if you ask at privacidad@datagrowtsystems.com.
c) Authorities (courts, the Spanish Data Protection Agency and others), when required by law.
We never share your data with database resellers or with companies that are not on the list of recipients.
8. International transfers
Some technology providers may process data outside the European Economic Area (for example, email services from companies based in the United States). In that case they only do so with the safeguards of the GDPR: an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) or standard contractual clauses. You can ask us for a copy of those safeguards.
9. How long we keep your data
| Data | Period |
|---|---|
| Your request data, to share with the companies | Up to 12 months from your authorisation, or until you withdraw it if earlier |
| Data for DataGrowt’s own communications | Until you withdraw your consent or, at most, 24 months without interaction |
| Evidence of the request, consents, communications to companies and withdrawals | Blocked for 3 years from the last communication or withdrawal (art. 32 LOPDGDD), available only to judges, courts and authorities |
| Fraud prevention data | Up to 12 months |
After these periods, we delete or anonymise the data.
10. Minors
The Portals are only for people over 18, who must confirm it in the form. If we detect a request from a minor, we delete it.
11. Your rights and how to exercise them
You can exercise these rights free of charge:
- Access, including knowing which specific companies we shared your data with and when.
- Rectification and erasure.
- Objection to processing based on legitimate interest.
- Restriction and portability.
- Withdrawal of consent, for all companies or just some. It does not affect what was done before.
How: on Your data, by writing to privacidad@datagrowtsystems.com or by post to the address in section 1. If we have reasonable doubts about your identity, we may ask you to confirm it, without asking for more data than necessary.
When you withdraw your consent or request erasure or object, we tell the companies that received your data within 2 working days (art. 19 GDPR). You can also contact them directly.
We reply within one month, extendable by two more if the request is complex; if so, we will let you know. If you believe we have not handled your rights properly, you can complain to the Spanish Data Protection Agency (AEPD, C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es).
12. Robinson List
You can register on the Spanish Robinson List (www.listarobinson.es) to stop advertising from companies you have not given permission to. If you are registered and give your authorisation on a Portal, the companies you authorised may contact you while it is valid (art. 23.4 LOPDGDD). If you do not want that, withdraw it.
13. Automated decisions
We do not take automated decisions that produce legal effects on you or significantly affect you, and we do not build marketing profiles. We only apply simple rules to detect fraudulent or duplicate requests.
14. Security
We apply technical and organisational measures appropriate to the risk: encrypted connections (HTTPS), least-privilege access control, delivery of data to the companies through protected channels and backups.
15. Changes to this policy and to the lists
Each version of this policy and of each list of recipients is dated, and we keep which one was in force when you gave your authorisation. If a change affects what you authorised (for example, a new company or channel), we will ask for a new consent.
Annex · Portals covered
| Portal | Address | Sector | Status |
|---|---|---|---|
| TuAlarma | tualarma.tellamamos.es | Home and business alarms | Open |
| TuSeguroDeDecesos | tusegurodedecesos.tellamamos.es | Funeral insurance | Open |
| TuReformaIntegral | tureformaintegral.tellamamos.es | Home renovation | Open |
| TuPlacaSolar | tuplacasolar.tellamamos.es | Solar panels | Open |
| — | Not yet published | Fibre and mobile | In preparation |
| — | Not yet published | NGOs | In preparation |
| — | Not yet published | Tarot | In preparation |
Version 1.0 · Last updated: 11 October 2026.