En Skijah nos tomamos en serio tu privacidad. Esta política explica qué datos personales tratamos cuando visitas nuestra web o usas nuestros productos, por qué lo hacemos y qué puedes hacer al respecto. Está escrita para entenderse; si algo no te queda claro, escríbenos.
Data controller
The controller of your data is:
- Legal name: {{RAZON_SOCIAL}}
- Tax ID (CIF/NIF): {{CIF}}
- Registered address: {{DOMICILIO_SOCIAL}}
- Privacy email: {{EMAIL_PRIVACIDAD}}
- Data Protection Officer (DPO), if applicable: {{EMAIL_DPO}}
What data we collect
We only process the data necessary to provide our services:
- Contact and form data: name, company, email, phone and the content of the messages you send us.
- Account and usage data: credentials, role, tenant and the activity within the platform needed to operate the service.
- Billing data: managed through Stripe. We don't store your full card details in our systems.
- Technical data: logs, IP address, device and browser type, for security and operational purposes.
Purpose and legal basis
Each processing activity relies on a legal basis under the GDPR:
| Purpose | Legal basis |
|---|---|
| Providing the service and access to the platform | Performance of a contract (art. 6.1.b) |
| Handling enquiries and providing support | Performance of a contract / legitimate interest |
| Billing and accounting and tax obligations | Legal obligation (art. 6.1.c) |
| Improving the product and security | Legitimate interest (art. 6.1.f) |
| Marketing communications and non-essential analytics | Consent (art. 6.1.a) |
When the basis is consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
Processors and third parties
To provide the service we share data with providers acting as data processors, always under contract and with appropriate safeguards:
- Hosting and infrastructure: servers where the platform runs.
- Payments: Stripe, to process subscriptions and payments.
- Transactional email: sending alerts, password resets and notifications.
- Analytics: usage measurement, only if you have given your consent.
We do not sell your data nor share it with third parties for advertising purposes.
International transfers
If any of our providers processes data outside the European Economic Area, we do so with the safeguards required by the GDPR (for example, adequacy decisions or standard contractual clauses of the European Commission). You can ask us for information about those safeguards.
Retention
We keep your data only for as long as necessary for each purpose:
- Account and service data: while the relationship is active.
- Billing data: for the legal periods (commercial and tax).
- Enquiries: for as long as needed to handle them and a reasonable period afterwards.
Once these periods end, data is securely deleted or anonymised.
Your rights
You can exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and portability, as well as withdraw your consent.
To exercise them, write to us at {{EMAIL_PRIVACIDAD}} indicating the right you wish to exercise. We'll respond within the legal timeframes.
If you believe we haven't handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es.
Security
We apply technical and organisational measures to protect your data: encryption, role-based access control and audit logs. Security is one of our pillars and we review it continuously.
Minors and changes to the policy
Our services are aimed at companies and professionals; they are not intended for minors and we do not knowingly collect data from minors.
We may update this policy to reflect legal or service changes. We'll always publish the current version on this page, with its update date.