svg viewBox=”0 0 26 26″ fill=”none” xmlns=”http://www.w3.org/2000/svg”>

Privacy Policy

This Privacy Policy explains how Aplicaset, SL processes users’ personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).

1. Data Controller

  • Responsible party: Aplicaset, SL
  • CIF/NIF: B23862790
  • Address: Ctra. de Manresa, num.47 CP. 28250, Solsona (Lleida)
  • Contact email: mariela@aplicaset.com

2. Data processed, purposes and legal bases

We can process the following categories of data :

  • Identifying information: name, surname, user.
  • Contact information: email, and if applicable, phone number.
  • Billing and payment information: billing information, last digits of card (via payment provider), collection and payment history.
  • Browsing and usage data: IP address, device identifiers, access logs, content viewed within the platform.
  • Communication data: messages and queries sent through forms or email.

Purposes and legal bases:

1. User account and membership management

  • Purpose: to manage the registration, access, maintenance and support of the account and membership (free or paid).
  • Legal basis: performance of a contract or application of pre-contractual measures (art. 6.1.b GDPR).

2. Billing and compliance with legal obligations

  • Purpose: issuing invoices, accounting management and compliance with tax and legal obligations.
  • Legal basis: compliance with legal obligations (art. 6.1.c GDPR).

3. Customer service

  • Purpose: to handle inquiries, requests for information, technical or payment issues.
  • Legal basis: performance of contract and/or legitimate interest in adequately serving users (art. 6.1.by 6.1.f GDPR).

4. Sending informational and/or commercial communications

  • Purpose: sending communications related to the service (changes to the platform, reminders, improvements) and, where applicable, commercial communications about products or services of Aplicaset, SL similar to those contracted.
  • Legal basis:
    • For registered users/customers: legitimate interest of Aplicaset, SL in keeping them informed about similar services (art. 6.1.f GDPR), always with the option to unsubscribe in each communication.
    • For other mailings (e.g., newsletter not linked to a contract): user consent (art. 6.1.a GDPR).

5. Improvement of service and platform security

  • Purpose: statistical analysis of platform usage, detection of unauthorized access, fraud prevention and improvement of functionalities.
  • Legal basis: legitimate interest (art. 6.1.f GDPR) in ensuring the security, quality and improvement of the service.

6. Management of cookies and similar technologies

  • Purpose: to enable the technical operation of the website, to analyze its use and, eventually, to personalize advertising, as detailed in the Cookies Policy.
  • Legal basis:
    • Technical cookies: legitimate interest (art. 6.1.f RGPD).
    • Analytical or advertising cookies: user consent (art. 6.1.a GDPR).

3. Storage periods

The data will be retained:

  • As long as the user keeps their account and/or membership active.
  • Once cancelled, they will remain blocked for the periods necessary to address any potential legal liabilities:
    • Billing and accounting data: minimum 6 years in accordance with commercial and tax regulations.
    • Other information: during the limitation periods for possible legal actions (generally between 3 and 5 years).

After these periods have elapsed, the data will be deleted or anonymized.

4. Recipients and processors

Aplicaset, SL will not transfer personal data to third parties, except:

  • Legal obligation (Public administrations, judicial bodies, etc.).
  • When necessary for the provision of the service:
    • Web hosting and hosting provider.
    • Payment gateway provider ([Stripe/PayPal/or other]).
    • Email marketing tools, CRM or support (if applicable).

In all these cases there is a data processing agreement that guarantees compliance with the GDPR.

If any of these providers are located outside the European Economic Area, appropriate safeguards for international transfers (standard contractual clauses, adequacy decisions, etc.) will be ensured, in accordance with Articles 44 et seq. of the GDPR.

5. User rights

The user may exercise the following rights:

  • Right of access: to know what data we process and for what purpose.
  • Right of rectification: to request the correction of inaccurate or incomplete data.
  • Right to erasure: request the deletion of your data when, among other reasons, it is no longer necessary for the purposes for which it was collected.
  • Right to object: to object to certain treatments, for example, to receiving commercial communications.
  • Right to limit processing.
  • Right to data portability.
  • Right to withdraw consent at any time, without affecting the lawfulness of processing based on prior consent.

To exercise these rights, the user may send a request to:

  • Email: mariela@aplicaset.com
  • Postal address: Ctra. de Manresa, num.47 CP. 28250, Solsona (Lleida), indicating “Data Protection” and attaching a copy of a document proving your identity.

Likewise, the user has the right to file a complaint with the Spanish Data Protection Agency (AEPD) if they believe that the processing of their data does not comply with the regulations.

6. Data security

Aplicaset, SL will implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including, but not limited to, access controls, encryption where appropriate, backups and restoration procedures.

However, no system is completely invulnerable, so Aplicaset, SL cannot guarantee the total invulnerability of information systems, although it is committed to acting diligently in the event of possible security incidents.