This is a translation. If it differs from the Spanish version, the Spanish one rules.
1. Controller
The data controller is Raúl Ocaña Alcaide (Startup Creator Art), Tax ID 15432143V, at Calle Venegas, 35003 Las Palmas de Gran Canaria (Islas Canarias, España). For any question about your data, write to hello@startupcreator.art.
2. What data we process and why
- If you visit startupcreator.art: we don't use cookies or analytics or advertising tools. Like any server, the one hosting the site logs technical data about each request (IP address, browser, page and time) to serve it and protect it from abuse. Legal basis: our legitimate interest in keeping the site available and secure (art. 6.1.f GDPR).
- If you write to us (for example, at hello@startupcreator.art): your email address, your name if you give it and what you tell us, to reply. Legal basis: your consent when writing to us and, if we discuss an agreement, the pre-contractual steps you ask for (art. 6.1.a and 6.1.b GDPR).
- If you're on the team and sign in to the internal dashboard (admin.startupcreator.art): your email, to send you the sign-in link, and a technical session cookie, needed for the dashboard to know you've signed in. Legal basis: your relationship with the owner (art. 6.1.b GDPR).
We don't make automated decisions about you or build profiles.
3. How long we keep it
- Server technical logs, for as long as the hosting provider keeps them (a few days).
- Emails you send us, for as long as the conversation lasts and, after that, as long as the law requires.
- Dashboard sign-in data, while you're on the team. Sign-in links expire after 10 minutes.
4. Who we share it with
We don't sell or hand over your data. These providers process it on our behalf, under a processing agreement:
- Vercel Inc.: hosting of the website and the internal dashboard, and their technical logs. Location: USA (EU-US Data Privacy Framework and standard contractual clauses). Processing agreement: https://vercel.com/legal/dpa.
- MongoDB, Inc. (Atlas): database of the internal dashboard. Location: servers in the European Union; the company, in the USA (standard contractual clauses). Processing agreement: https://www.mongodb.com/legal/data-processing-agreement.
- Resend (Plus Five Five, Inc.): sending the sign-in email of the internal dashboard. Location: USA (EU-US Data Privacy Framework and standard contractual clauses). Processing agreement: https://resend.com/legal/dpa.
When a provider is outside the European Economic Area, the transfer relies on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission.
5. Your rights
You can ask to access, correct or delete your data, object to or restrict its processing, or take it to another controller, by writing to hello@startupcreator.art. If processing is based on your consent, you can withdraw it at any time. If you think we haven't handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
6. Changes
If this policy changes, the date above will say so. Who the owner is is explained in the legal notice.