arcedia.es respects user privacy and complies with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD). This policy explains how personal data collected through arcedia.es is processed.

Data Controller

The controller is the Owner, whose identification and contact details appear in the Legal Notice. For any questions regarding data protection, you may write to info@arcedia.es.

Data processed and purposes

Depending on the relationship the user has with arcedia.es, the following data may be processed:

• Registration and subscription data (first name, surname, address, email, telephone): to manage sign-up, the account, and the provision of the subscription service.
• Billing and payment data: to process payments and comply with tax and accounting obligations. Card or account details are managed via the payment provider; the Owner does not store complete payment instrument details.
• Contact data (provided via forms or email): to handle inquiries and requests.
• Browsing data (cookies and similar technologies): see the Cookie Policy.

Legal bases

• Performance of a contract (Art. 6.1.b GDPR): management of the subscription, account, and payments.
• Compliance with legal obligations (Art. 6.1.c): tax, accounting, and consumer protection obligations.
• Consent (Art. 6.1.a): non-essential communications and non-technical cookies, when granted by the user. Consent may be revoked at any time.
• Legitimate interest (Art. 6.1.f): site security and handling inquiries, where applicable.

Data retention

Data will be retained for the duration of the subscription relationship and, following its termination, for the periods required by law (e.g., tax and accounting requirements). Thereafter, the data will be deleted or anonymized.

Recipients and data processors

To provide the service, the Data Controller engages providers who access data as data processors; contracts as required by Article 28 of the GDPR are signed with these parties:

• Web hosting provider:: IONOS Cloud, S.L.U. Calle Madre de Dios 21, 26004 Logroño, La Rioja.
• Payment provider(s): PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal, L-2449 Luxemburgo.

Data is not disclosed to other third parties unless required by law. No international transfers outside the European Economic Area are planned; should any occur, they will be carried out in compliance with GDPR safeguards.

User rights

Any user may exercise their rights of access, rectification, erasure, objection, restriction of processing, and data portability, as well as withdraw previously given consent, by writing to datos@arcedia.es and providing appropriate identification.

Users also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if they consider that their rights have not been duly addressed.

Security

The Data Controller implements reasonable technical and organizational measures to protect data against unauthorized access, loss, or alteration, in accordance with the state of the art and the nature of the data being processed.