Request a demo

Privacy policy

At BLUE OCTOPUS WIFI SL (“Octopus Wifi”) we take privacy seriously. This policy explains what personal data we process when you visit www.octopuswifi.com, write to us or interact with us on social media, what we use it for, who we share it with and how you can exercise your rights, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).

1. Data controller

  • Company: BLUE OCTOPUS WIFI SL
  • Tax ID (CIF): B13621974
  • Registered office: C/ Carlos Morales 28, bajo C, 13700 Tomelloso (Ciudad Real), Spain
  • Email: info@octopuswifi.com
  • Phone: (+34) 911 095 290
  • Registration: Commercial Register of Ciudad Real, volume 652, folio 32, sheet CR-30227

For any question about the protection of your data you can write to us at info@octopuswifi.com.

2. What data we process, why and on what legal basis

2.1. Contact and demo request forms

When you contact us through the website forms we process the data you provide: first name and surname, email address, company, phone number (if you give it) and the content of your message.

  • Purpose: to answer your enquiry or demo request, send you the commercial information you ask for and, where applicable, manage the pre-contractual relationship with you or your company.
  • Legal basis: your consent, given when you submit the form (Art. 6(1)(a) GDPR), and taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
  • Retention: for as long as necessary to deal with your request and maintain the business relationship, and until you ask us to delete it. After that, the data will be kept blocked for the limitation periods of any legal liabilities.

2.2. Marketing communications

If you authorise us to, or if you are already a customer, we may email you information about our products, services, events and news similar to those you have purchased or requested.

  • Legal basis: your consent (Art. 6(1)(a) GDPR) or, for customers, our legitimate interest in informing you about similar products and services (Art. 6(1)(f) GDPR and Art. 21(2) of Spanish Law 34/2002, LSSI-CE).
  • Retention: until you withdraw your consent or object to receiving communications, which you can do at any time using the link included in every message or by writing to us.

2.3. Customers, partners and suppliers

We process the contact details of the people who represent our customers, partners and suppliers to manage the contractual relationship, invoicing, technical support and compliance with our legal obligations.

  • Legal basis: performance of the contract (Art. 6(1)(b) GDPR), compliance with legal obligations, for example tax and accounting obligations (Art. 6(1)(c) GDPR), and our legitimate interest in maintaining professional contact with the company (Art. 6(1)(f) GDPR).
  • Retention: for the duration of the contractual relationship and, afterwards, for the periods required by applicable law.

2.4. Browsing, cookies and consent records

The website uses its own and third-party cookies. We only set non-essential cookies if you consent through the cookie banner, which we manage with the CookieYes tool. To be able to prove that you have given or refused consent, we record your choice, the date and a session identifier with your IP address anonymised.

  • Legal basis: your consent for non-essential cookies (Art. 22(2) LSSI-CE and Art. 6(1)(a) GDPR) and compliance with a legal obligation for the consent record (Arts. 6(1)(c) and 7(1) GDPR).
  • You will find full information in our cookie policy, and you can change your choice at any time from the banner.

2.5. Analytics and marketing

If you accept them in the cookie notice, we also use these services:

  • Google Analytics (Google): website usage statistics.
  • Leadfeeder (Dealfront): identifies the companies that visit the website based on the IP address and public information about organisations.
  • ActiveCampaign site tracking: if you have already given us your details, it links the pages you visit to your contact record so that the information we send you is more relevant.
  • Google Ads (Google): on the campaign page, measures the conversions from our ads.
  • Legal basis: your consent (Art. 22(2) LSSI-CE and Art. 6(1)(a) GDPR), which you can withdraw at any time from the cookie notice.
  • Retention: as stated for each cookie in the cookie policy and, in each provider’s tools, the retention period we have configured.

2.6. Videos and third-party content

Some pages include YouTube videos (Google Ireland Limited). When you play them, Google may process data about your browsing in accordance with its own privacy policy. This content is only loaded if you accept the corresponding cookies.

2.7. Social media

Octopus Wifi has profiles on LinkedIn, X (formerly Twitter) and Facebook to promote its products and services. If you follow or interact with our pages, we will process the public information in your profile, in particular your name, and the messages you send us, only within the social network itself and to manage that relationship.

  • Legal basis: your consent when you join our pages (Art. 6(1)(a) GDPR).
  • This data is not added to our systems outside the social network. Each social network is responsible for its own processing in accordance with its privacy policy: LinkedIn, X and Facebook.
  • When you post content on our pages you must own the rights to it or have the consent of any third parties involved. We reserve the right to remove content that breaches the law, third-party rights, morality or decency.
  • Any competitions and promotions we run on social media will be governed by their own terms, published in each case.

2.8. Users of Wi-Fi networks managed with Octopus Wifi

If you connect to the Wi-Fi network of a venue (a hotel, restaurant, shop…) that uses our platform, the controller of your data is that venue, and Octopus Wifi acts as a processor on its behalf. Information about that processing and how to exercise your rights is set out in the privacy policy shown on that network’s login portal.

3. Recipients of the data

We do not sell or disclose your data to third parties unless required by law. To provide our services we use providers that act as data processors, with whom we have signed the contracts required by the GDPR:

  • Hosting and infrastructure providers for the website and our systems.
  • ActiveCampaign, LLC (United States), the tool we use to manage contact forms, marketing communications and, if you accept it, website visit tracking.
  • CookieYes Limited (United Kingdom), for cookie consent management.
  • Google Ireland Limited, for Google Analytics, Google Ads and embedded YouTube videos, only if you accept the corresponding cookies.
  • Dealfront Group GmbH (Germany), provider of Leadfeeder, only if you accept marketing cookies.

We may also disclose data to public authorities, courts and law enforcement agencies when required by law or by a court order.

4. International transfers

Some providers are located outside the European Economic Area. In those cases, transfers are made with the safeguards provided for in the GDPR: adequacy decisions of the European Commission (such as the one for the United Kingdom or the EU-US Data Privacy Framework, in which ActiveCampaign and Google participate) or standard contractual clauses approved by the European Commission. You can ask us for more information about these safeguards at info@octopuswifi.com.

5. Your rights

You can exercise the following rights at any time:

  • Access: find out whether we process your data and obtain a copy.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: ask us to delete your data when it is no longer necessary, among other cases.
  • Objection: object to processing, in particular to marketing communications.
  • Restriction of processing: ask us to keep your data only for the establishment, exercise or defence of legal claims.
  • Portability: receive your data in a structured, commonly used format, or have us transmit it to another controller.
  • Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.

To exercise them, email us at info@octopuswifi.com or write to our registered office, stating which right you wish to exercise. If necessary to verify your identity, we may ask you for additional information. We will reply within one month.

If you believe we have not processed your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority of your country of residence.

6. Security

We apply appropriate technical and organisational measures to protect your data against loss, unauthorised access or misuse. Our information security and privacy management system is certified to ISO/IEC 27001 and ISO/IEC 27701. You can read our statement of commitment to information security and privacy.

7. Minors

This website is aimed at businesses and professionals, not at children under 14. If you are under that age, please do not send us your personal data.

8. Accuracy of data

You guarantee that the data you provide is true and up to date, and you undertake to inform us of any changes. If you provide us with data about third parties, you must have informed them beforehand and obtained their consent.

9. Changes to this policy

We may update this policy to reflect legal changes or changes to our services. The current version will always be published on this page.

Last updated: October 2026.