Privacy policy
Last updated:
This translation is provided for convenience. Only the Spanish version is legally binding. Read the Spanish version
Who is responsible
Daniel Poza Rivera, NIF 50996656K, owner of Despixela. For any question about your data, write to us through danielpozarivera123@gmail.com.
What data we process and why
- Contact form: name, print shop, phone or email and your message. Only to reply to you and, if you are interested, give you access to the service. Legal basis: steps taken at your request prior to a contract, and your consent when you send it.
- Print shop accounts: print shop name, username and password (stored encrypted; we never see it). To give you access to the portal and provide the service. Legal basis: the service contract.
- Orders and files: the files you upload, their details (title, size, note) and the results we deliver. To carry out the job. Legal basis: the service contract.
- Security: minimal technical access logs generated by our providers. Legal basis: our legitimate interest in keeping the service secure.
We do not use analytics, advertising or profiling, and we never sell or share data.
Images of your print shop's customers
The files you upload may contain people or other third-party data. In that case your print shop is the controller of that data and Despixela acts as processor: we only use it for the job you ask for, never to train models or for any other purpose, and we delete it 90 days after delivery, or sooner if you ask. The terms of this processing are set out in the data processing agreement.
Providers who help us
- Vercel Inc. — website hosting and file storage.
- Supabase Inc. — database and account access (United States).
- Anthropic and OpenAI — artificial intelligence tools we may use when restoring some images, only with the files of that job.
Some of these providers are based in the United States. Transfers rely on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission.
How long we keep data
- Contact messages: up to 12 months if we don't end up working together.
- Accounts: for as long as the print shop uses the service.
- Files and results: 90 days from delivery of the order (or from its rejection); then they are deleted, unless the print shop asks otherwise.
Your rights
You can request access, rectification, erasure, objection, restriction of processing and portability of your data through danielpozarivera123@gmail.com. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).
Security
Files are kept in private storage and can only be opened through temporary links that the website generates after checking that the account has permission. Each print shop only sees its own orders.