Privacy Policy

1. Basic Information on Data Protection (First Layer)

Data Controller Pablo Nasarre Codinach
Address: Carrer dels Madrazo, 86, 08006 Barcelona, Spain.
Email: contacto@pablonasarre.com.
Main Purpose Handling business inquiries, preparing proposals, custom web development, deployment, and ongoing technical maintenance for businesses, brands, and professionals.
Lawful Basis Explicit consent of the data subject upon contacting and execution of the digital services & maintenance agreement.
Third Parties & Subprocessors Stripe (secure payments & subscriptions), WhatsApp / Meta (direct support and communication), and Hostinger (private web hosting infrastructure within the European Union).
Retention Period For the duration of the commercial relationship and during legally mandated periods to meet tax and accounting statutory duties.
User Rights Access, rectification, erasure, restriction, data portability, and objection by contacting contacto@pablonasarre.com.
Supervisory Authority Spanish Data Protection Agency (aepd.es).

2. Detailed Information on Data Processing (Second Layer)

2.1. What personal data do we collect?

We collect only relevant, proportionate, and strictly necessary data to formalize the contractual and technical relationship:

  • Contact and Identification Data: Full name, phone number (used for technical support and WhatsApp coordination), and email address.
  • Business Venue Data: Trade name, venue address, operating hours, business contact phone, menu/service catalog, and promotional photos voluntarily provided for inclusion on the website.
  • Invoicing Data: Client full name or company name, Tax ID (NIF/CIF), and fiscal address for mandatory official invoicing including VAT. (Bank card details are processed directly by Stripe under PCI-DSS Level 1 security standards; Pablo Nasarre Codinach never stores card numbers or banking credentials).

2.2. Third Parties and Subprocessors

To provide high-quality service, we rely on established technical and contractual providers under Article 28 of the GDPR:

  • Stripe Payments Europe, Ltd. (Ireland / EU): Handles secure and recurring payment processing (€197 initial setup and €20/month maintenance, VAT incl.). Complies with international PCI-DSS Level 1 banking security standards.
  • WhatsApp / Meta Platforms Ireland Ltd. (Ireland / EU): Used for instant communication, project coordination, and post-launch technical support. Conversations feature end-to-end encryption.
  • Hostinger Operations, UAB (Lithuania / EU): Provider of high-speed private cloud server infrastructure where websites are hosted, located inside secure data centers within the European Union.

2.3. Service Delivery Method & Technical Setup

Requirements gathering, proposal review, DNS record setup, and technical deployment are conducted remotely or in person as agreed between the client and Pablo Nasarre Codinach.

2.4. Security Measures

We enforce organizational and technical security protocols to ensure confidentiality, integrity, and availability of data. All web traffic and payment actions are encrypted via SSL/TLS certificates (HTTPS).

2.5. Exercising Your Rights

You can request access, rectification, erasure, restriction, objection, or portability of your data at any time with a copy of your identification document to:

Pablo Nasarre Codinach
Carrer dels Madrazo, 86, 08006 Barcelona, Spain
Email: contacto@pablonasarre.com
Subject: "GDPR Rights Request"