Legal
Privacy Policy
Your privacy matters. We only collect what's necessary to make the service work, and we never sell your data.
1. Data controller
ARSTDATA LABS SL (trading as "ARST Data"; "ARST" or "we"), Spanish tax ID (NIF) B88701362, registered office at Calle Ciprés 30, 28460 Los Molinos (Madrid), Spain, is the data controller for the personal data collected through this website.
Contact email: info@arstdata.com
2. Data we collect
We collect the following personal data:
- Registration data: full name and email address, to create and manage your account.
- Usage data: pages visited, session duration and traffic source (via Google Analytics, only with your consent).
- Billing data: handled entirely by Stripe. ARST does not store card data.
- Contact data: name, company and message if you write to us through the contact form.
3. Purpose and legal basis
| Purpose | Legal basis |
|---|---|
| Managing your account and access to the service | Contract performance (Art. 6.1.b GDPR) |
| Sending transactional emails (verification, invoices) | Contract performance (Art. 6.1.b GDPR) |
| Web analytics (Google Analytics) | Consent (Art. 6.1.a GDPR) |
| Responding to contact inquiries | Legitimate interest (Art. 6.1.f GDPR) |
4. Data retention period
Account data is kept for as long as you maintain an active account. After closing your account, it is deleted within a maximum of 90 days, unless a longer legal retention obligation applies (e.g. billing data: 5 years under Spanish tax law).
Web analytics data is kept for the period configured in Google Analytics (14 months by default).
5. International transfers
Google Analytics transfers data to Google LLC servers in the US under the EU-US Data Privacy Framework, which the European Commission has declared adequate (Decision 2023/1795). Stripe processes payments under equivalent safeguards.
6. Your rights
Under the GDPR and the LOPDGDD (the Spanish data protection act), you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure (the "right to be forgotten")
- Object to processing or request its restriction
- Data portability
- Withdraw your consent at any time (without affecting the lawfulness of processing carried out before the withdrawal)
To exercise these rights, write to us at info@arstdata.com. You can also file a complaint with the Spanish Data Protection Agency (AEPD).
7. Security
Passwords are stored hashed with bcrypt. Communications always run over HTTPS with TLS 1.2+. We perform regular backups and restrict access to data.
8. Cookies
See our Cookie Policy for detailed information about the cookies we use.
9. Changes to this policy
We may update this policy periodically. We will notify you by email if the changes are significant. The last-updated date appears at the top of this page.