Privacy Policy

This Privacy Policy describes how Harnoorpreet Singh (hereinafter, "the Controller") collects, uses, and protects the personal data of users of the website solidaweb.com, in compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018, on Personal Data Protection and guarantee of digital rights (LOPDGDD).

1. Data Controller

• Identity: Harnoorpreet Singh
• NIF/NIE: [NIF/NIE - Pendiente]
• Address: Barcelona, España
• Email: info@solidaweb.com
• Phone: +34 662 931 500

2. Personal data we collect

2.1 Contact form

Through the contact form, we collect the following personal data:

• Name: Required
• Email address: Required
• Company: Optional
• Message: Required

2.2 Payment data

Payment data is processed through Stripe. We do not store credit card data or banking information directly. Stripe acts as a data processor. For more information, see Stripe's Privacy Policy: https://stripe.com/privacy

3. Purposes of processing

Personal data is used for the following purposes:

• Respond to inquiries and information requests
• Manage contracting and service provision
• Process payments through Stripe
• Comply with tax and legal obligations
• Send service-related communications (not marketing)

4. Legal basis for processing

• Contact form: Legitimate interest (art. 6.1.f GDPR) to respond to inquiries
• Service contracting: Contract performance (art. 6.1.b GDPR)
• Payment processing: Contract performance (art. 6.1.b GDPR)
• Tax obligations: Legal obligation (art. 6.1.c GDPR) - invoice retention for 6 years per Spanish tax regulations

5. Data recipients

Personal data may be shared with:

• Stripe: As a data processor to process payments. Stripe has a Data Processing Agreement (DPA) that complies with GDPR. More information: https://stripe.com/legal/dpa
• Tax authorities: When legally required

We do not sell or share personal data with third parties for commercial purposes.

6. International data transfers

Stripe, our payment processor, may transfer data to the United States. Stripe uses Standard Contractual Clauses (SCC) approved by the European Commission to ensure data protection in compliance with GDPR. For more details, see: https://stripe.com/privacy

7. Retention periods

• Contact form data: 3 years from last contact
• Billing and payment data: 6 years per Spanish tax regulations
• Project data: Duration of contractual relationship plus 3 years

After these periods, data will be securely deleted.

8. User rights

Under GDPR and LOPDGDD, you have the right to:

• Access: Obtain information about whether we are processing your data and, if so, access it
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your data in certain circumstances
• Restriction: Request that processing of your data be restricted
• Portability: Receive your data in a structured and commonly used format
• Objection: Object to processing based on legitimate interest
• Withdraw consent: At any time, when processing is based on consent

9. How to exercise your rights

To exercise any of these rights, you can contact us by sending an email to info@solidaweb.com with the subject "GDPR rights exercise" along with a copy of your identity document. We will respond within a maximum of 1 month.

10. Right to file a complaint with the AEPD

If you believe that the processing of your personal data violates data protection regulations, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD):

• Website: www.aepd.es
• Address: C/ Jorge Juan 6, 28001 Madrid, España
• Phone: +34 901 100 099 / +34 912 663 500

11. Automated decisions

No automated decisions are made nor are profiles created based on the personal data collected.

12. Data security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for data transmission, restricted access to personal data, and regular backups.

13. Policy modifications

We reserve the right to modify this Privacy Policy at any time. Modifications will be published on this page with the corresponding update date. We recommend reviewing this page periodically.