Privacy policy

Controller

[RAZÓN SOCIAL] ([NIF]), [DOMICILIO SOCIAL]. Contact: [EMAIL DE CONTACTO].

Important: for the data of each business's end customers (calls, messages, appointments), the business is the controller and Recepta acts as processor under the Data processing agreement.

What data we process and why

Account data (name, email, hashed password) to provide the service and manage your access. Legal basis: performance of the contract.

Billing data (company name, tax ID, address, payment method handled by the payment provider) to charge you and meet tax obligations. Legal basis: contract and legal obligation.

Technical usage and security data (IP address, access logs) to protect the service. Legal basis: legitimate interest.

Analytics and marketing communications only with your consent, which you can withdraw at any time.

Where it is hosted

Data is hosted in the European Union. The list of sub-processors is published and updated in this policy before any change.

How long

While the account is active and then for the statutory limitation periods. Transcripts and recordings are kept according to the retention policy each business configures.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to [EMAIL DE CONTACTO]. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or your local authority.