Legal

Privacy Policy

This Privacy Policy aims to inform users about how their personal data is collected, used, stored and protected in compliance with applicable data protection law, specifically Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (the General Data Protection Regulation, or GDPR).

This document is designed to ensure transparency and trust in how we handle personal data. It describes the measures we have adopted to protect user privacy and explains the rights available to users regarding their personal data.

Introduction

At Taidy we are committed to protecting the privacy and security of our users' personal data. This Privacy Policy describes how we collect, use, share and protect the personal information provided to us through our services.

This policy is designed to comply with applicable regulatory requirements, including the GDPR.

We recommend reading this Privacy Policy carefully to understand our practices regarding your personal data and your rights as a user. If you have any questions or concerns, please contact us through the means provided in this policy.

Data Controller

Taidy Innovación S.L., B02594125, Calle Tesifonte Gallego 9, Floor 2 Office 1, 02002 Albacete, Spain. For any query relating to the processing of your data: info@taidy.io.

Purposes of Processing

The personal data we collect will be processed for the following purposes:

  • Service delivery: Managing and facilitating the provision of services requested by users, including technical assistance and customer support.
  • Improving user experience: Analysing user behaviour and preferences to improve the quality and functionality of our services.
  • Marketing and communications: Sending commercial and promotional communications related to our products and services, only where the user has given explicit consent.
  • Legal compliance: Fulfilling our legal and regulatory obligations.
  • Security and fraud prevention: Ensuring the security of our systems and services, and preventing and detecting fraud and unlawful activity.
  • Client relationship management: Managing our contractual relationship with clients, including billing and payment collection.

Types of Data Collected

  • Identification data: Including, but not limited to, name, surname, postal address, email address, telephone number and identity document.
  • Contact data: Email address, telephone number and postal address.
  • Browsing data: Information collected through cookies and similar technologies, such as IP address, browser type, pages visited, time spent and other interaction data.
  • Preference and usage data: Information on user preferences, interests and use of our products and services.
  • Communication data: Records of communications maintained with us, including emails and web messages.
  • Location data: Geographic location information obtained through mobile devices or IP addresses.

Legal Basis for Processing

  • User consent: Where required, we will request explicit consent for the processing of personal data. This consent may be withdrawn at any time.
  • Performance of a contract: Processing is necessary for the performance of a contract to which the user is party.
  • Legal obligations: Processing is necessary for compliance with a legal obligation to which we are subject.
  • Legitimate interests: Processing is necessary for the purposes of legitimate interests pursued by our organisation, where these do not override the user's fundamental rights and freedoms.

Recipients of Data

  • Service providers: Companies providing services on our behalf, such as web hosting, system maintenance, data analysis, payment processing and customer support. These providers are obligated to use data solely for the contracted services. In particular, this website uses:
    • Amazon Web Services EMEA SARL, to host and deliver the website (servers in the European Union, Ireland region).
    • Google Ireland Limited, for web analytics (Google Analytics), only if you consent.
  • Competent authorities: Where required by law, personal data may be disclosed to judicial or administrative authorities.

Web Analytics

If you consent, we use Google Analytics 4 to obtain usage statistics for the website: pages visited, traffic sources, device and browser type, and approximate location. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time from the "Cookie settings" link in the footer. Google Analytics 4 does not log or store IP addresses. Data is kept for the period configured in Google Analytics, up to a maximum of 14 months. More information in our Cookie Policy.

International Transfers

Some of our providers, such as Google and Amazon Web Services, belong to groups headquartered in the United States, so international data transfers may occur. These transfers are covered by the EU-U.S. Data Privacy Framework, under which Google LLC and Amazon.com, Inc. are certified, and by the Standard Contractual Clauses approved by the European Commission.

User Rights

Under applicable data protection law, users have the following rights:

  • Right of access
  • Right to rectification
  • Right to erasure (right to be forgotten)
  • Right to restriction of processing
  • Right to data portability
  • Right to object
  • Right not to be subject to automated decision-making

To exercise these rights, please contact us at info@taidy.io. We will respond within one month of receiving your request.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) if you believe that the processing of your personal data infringes applicable law.

Security Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction, including data encryption, access controls, regular backups and continuous staff training. These measures are reviewed and updated periodically.

Data Retention

Personal data will be retained for as long as necessary to fulfil the purposes for which it was collected, and to comply with applicable legal, contractual and regulatory obligations. Once retention periods have elapsed, data will be securely and confidentially deleted.