01Identity of the Data Controller
- Controller
- Spalopia, S.L.
- Company tax ID (CIF)
- B76681568
- Registered address
- Av. Sor Soledad Cobián 7, planta baja, 38300 La Orotava, Santa Cruz de Tenerife, España
- Website
- sianabyspalopia.com
- info@spalopia.com
The Controller determines the purposes and means of the processing of your personal data.
02Personal data we collect
We collect and process the following data, depending on the service contracted:
- Identification and contact data: first name, surname(s), address, email address, telephone number.
- Financial and contractual data: billing and payment information, history of purchases or services contracted.
- Browsing and service usage data: IP address, device type, browser, date and time of access, cookies and other technical identifiers.
- Additional data provided by the user: information sent through contact forms or support requests.
03Purpose and legal basis of the processing
Your personal data are collected and processed for the following purposes:
| Purpose | Legal basis |
|---|---|
| Managing the contractual relationship and the provision of the SIANA SaaS services | Performance of a contract (Art. 6(1)(b) GDPR) |
| Sending communications relating to the service and billing | Performance of a contract (Art. 6(1)(b) GDPR) |
| Marketing and commercial communications about related products or services | Prior consent (Art. 6(1)(a) GDPR) |
| Usage analysis and optimisation of the website and the platform | Legitimate interest (Art. 6(1)(f) GDPR), unless the user has given consent to third-party cookies |
| Compliance with legal and tax obligations | Compliance with a legal obligation (Art. 6(1)(c) GDPR) |
04Recipients and data processors
Personal data may be disclosed to:
- External data processors, under data protection agreements: cloud hosting and storage providers, payment platform providers, email and CRM providers, and web analytics and tracking tools (Google Analytics, etc.).
- Competent authorities, where there is a legal obligation to do so.
Data are not sold or disclosed to third parties for commercial purposes without consent.
05International transfers
Personal data are processed mainly within the European Economic Area (EEA). In the event of transfers outside the EEA, compliance with the applicable regulations will be ensured by means of Standard Contractual Clauses (SCCs) or other mechanisms recognised by the EU, unless a legal obligation prevents this.
06Data retention
Data will be retained for as long as necessary to fulfil the purposes of the processing and to comply with the applicable legal obligations:
- Data of SIANA customers and users: for the duration of the contractual relationship plus 3 years thereafter.
- Marketing and commercial communications data: until consent is withdrawn.
- Browsing and web analytics data: up to a maximum of 26 months.
- Billing data: 6 years, in accordance with Spanish tax legislation.
07Rights of data subjects
You may exercise the following rights at any time:
- Access to your personal data
- Rectification of inaccurate or incomplete data
- Erasure of data when they are no longer necessary
- Restriction of processing
- Objection to processing
- Portability of your data to another provider
To exercise these rights, you may send a request to:
- Email: info@spalopia.com
- Postal address: Av. Sor Soledad Cobián 7, planta baja, 38300 La Orotava, Santa Cruz de Tenerife, España
The Controller will respond within a maximum of one (1) month from receipt of the request, in accordance with the GDPR.
08Data security
Appropriate technical and organisational measures are implemented to ensure the security of personal data, including:
- Role-based access control
- Strong passwords and enhanced authentication
- Encryption of data in transit and at rest
- Regular backups and disaster recovery procedures
- Up-to-date firewalls and antivirus systems
- Confidentiality policies and ongoing staff training
09Cookies and other tracking technologies
The website uses cookies and similar technologies to:
- Ensure the proper functioning of the website and of the contracted services
- Analyse web traffic and improve the user experience
- Personalise content and advertising (subject to prior consent)
Users can configure, reject or delete cookies at any time through the cookie banner or in their browser settings.
For more information: Cookie Policy.
10Changes to this policy
Spalopia reserves the right to amend this policy to adapt it to new legal requirements or changes to the service. The version in force will always be published on this page together with the date of its last update.
11Contact and complaints
If you have any questions or complaints regarding the processing of your data, you may contact the Controller or, as a last resort, the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD).
- Website: aepd.es
- Tel.: +34 901 100 099