Legal

Privacy policy

This is a courtesy translation. In case of any discrepancy, the Spanish version prevails.

Last updated: July 2026.

This policy describes how Tarraco App Lab processes the personal data of the users of this website, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and with Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).

2. What data we process

• Contact data: the data you provide when filling in forms or writing to us (name, email address, phone number and the content of your message).
• Account data (if the service allows registration, such as the "Work with us" area): email address and the files you provide (for example, your CV); access is granted through a one-time link sent to your email.
• Technical data: IP address, session identifiers and logs necessary for security and operation.

3. Purposes and legal basis

• Handling your request and providing the contracted service — performance of a contract or pre-contractual measures.
• Security and abuse prevention — legitimate interest.
• Analytics and commercial communications — consent (which you can withdraw at any time).
• Applicable legal obligations — legal obligation.

4. Recipients and data processors

To deliver the service we rely on the following providers (data processors), with whom the guarantees required by the GDPR are in place:

• Netlify, Inc. (USA): website hosting and management of the contact form.
• Supabase, Inc. (USA): database, file storage (CV) and authentication for the "Work with us" area.

5. International transfers

Some providers are located outside the European Economic Area (mainly the USA). These transfers are covered by the Standard Contractual Clauses (SCCs) approved by the European Commission and by supplementary measures. You can request information about these safeguards by writing to privacidad@tarracoapplab.com.

6. Retention

We retain your data for as long as the relationship with the user exists and, afterwards, for the periods legally required to address potential liabilities; the data is then deleted or anonymised.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to privacidad@tarracoapplab.com. You may also withdraw your consent at any time and lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that your request has not been addressed.

8. Security

We apply appropriate technical and organisational measures: encryption in transit, access control, secure secrets management and security event logging.

9. Changes to this policy

We may update this policy to reflect legal or service changes. The current version will always be published on this page.