Privacy policy

Controller

Creattia Soluciones Informáticas SL, tax ID B-86884541, with address at Av. Pintor Antonio López 24, 28320 Pinto (Madrid), Spain. You can write to us at info@creattia.com.

What data we process and why

If you write to us through the contact form, we process your name, your email, the name of your business, your phone number if you give it and your message. We only use them to reply to you and, if you ask, to prepare a quote.

We do not store your request in our databases: it reaches our sales mailbox by email.

Legal basis

Your consent when you send the form and, if you ask for a quote, taking steps at your request before entering into a contract (Article 6(1)(a) and (b) GDPR).

How long

We keep your messages for as long as needed to handle your request and, if we reach an agreement, for the periods required by law. Otherwise, we delete them at most one year after our last contact.

Who else processes them

We do not share your data with third parties. The providers that host the site, the email and the visit statistics process them on our behalf, under a data processing agreement.

Your rights

You can request access, rectification, erasure, restriction or portability of your data, or object to its processing, by writing to info@creattia.com. You can also complain to the Spanish Data Protection Agency (www.aepd.es).

Loyalty cards

The data of the customers of each business that uses Selloteca is processed by that business, which is the controller. Selloteca processes it on behalf of the business, as a processor. Please check each business’s privacy policy.

Each customer decides whether to add their card to their phone’s wallet. If they add it to Google Wallet, Google receives their name, their points, their latest services and redemptions and the address of the card’s QR code, to show the card and keep it up to date, as a sub-processor of Selloteca.

If they add it to Apple Wallet, the card is downloaded to their device directly from Selloteca. Selloteca keeps an identifier of the device to notify it of changes, and the notification that goes through Apple carries no data from the card.

If the customer withdraws, the card in the wallet is deactivated. When their data is anonymised, their name, points and history disappear from it, and the identifiers of their devices are deleted.

Visit statistics

To learn how this site is used, we measure visits with Umami, an analytics tool that we host ourselves. It records the page visited, the referring page, the browser, the operating system, the device type, the language and the approximate location (country, region and city), derived from your IP address without storing it. It does not identify you or use cookies.

We only use it to obtain aggregated usage statistics, on the basis of our legitimate interest (Article 6(1)(f) GDPR), and we keep the data for 24 months at most.

It is hosted by Microsoft Azure and Supabase as processors. They are groups based in the United States, but the data is hosted in the European Union. Any international transfer would be covered by standard contractual clauses or by the EU-US Data Privacy Framework.

Cookies

This site does not use cookies or store any information on your device.