This Privacy Policy describes how personal data of users and customers of webstilo.com is collected and processed, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
- Controller: Eduard Puigdemunt Gelabert (40306092H)
- Address: Avda Tarragona 10, 43881 CUNIT (Tarragona), España
- Contact email: info@webstilo.com
2. Purposes of the processing
The personal data you provide us is processed for the following purposes:
- To create and manage your customer account and the contract for the services you subscribe to.
- To handle orders, invoicing, payments and refunds.
- To provide technical support and respond to your queries.
- To comply with applicable legal obligations (tax, accounting, reporting to authorities, etc.).
3. Legal basis
- Performance of the contract when you subscribe to a service or request information that requires your data.
- Compliance with legal obligations, especially tax and accounting.
- Legitimate interest for site security, fraud prevention and service improvement.
4. Data we process
We collect only the data necessary for the stated purposes:
- Identification: first name and last name.
- Contact: email, phone, postal address.
- Account: username, IP address used to subscribe, language.
- Billing: legal name, tax ID/VAT and address if you act as a business.
We do not process special categories of data (health, beliefs, etc.) nor financial data directly: payments are processed by external gateways that do not share card data with us.
5. Recipients and data processors
To deliver the services we share strictly necessary data with the following third parties, who act as data processors with their own safeguards:
- LiquidNet Ltd. — technical operator of the hosting and domain infrastructure. A data processing agreement under Article 28 GDPR is in place with the controller.
- Payment gateways (Stripe, PayPal, banks, etc.) when you choose to pay through them. They receive the data strictly necessary to process the payment.
6. International transfers
The technical operator is established in the United Kingdom. Transfers are based on the European Commission's Adequacy Decision of 28 June 2021, which recognizes an equivalent level of protection to that of the European Economic Area. We do not transfer data to other countries without appropriate safeguards.
7. Retention periods
Data is retained for the duration of the contractual relationship and, once finished, for the legal periods required to address possible liabilities arising from the processing (a minimum of 4 years under tax rules). Once those periods elapse, data is securely deleted.
8. Your rights
As a data subject you can exercise the following rights at any time:
- Access: know what data we hold about you.
- Rectification: correct inaccurate data.
- Erasure: ask us to delete data when no longer necessary.
- Objection: object to processing based on legitimate interest.
- Portability: receive your data in a structured, reusable format.
- Restriction: request a temporary limitation of the processing.
To exercise these rights simply send us an email to our contact address indicating the right you exercise and attaching a document proving your identity. We will respond within one month.
9. Complaints
If you believe the processing of your data does not comply with applicable law, you have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es) or with the supervisory authority of your country of residence.
10. Cookies
The use of cookies on webstilo.com is described in detail in our Cookie Policy.