Privacy Policy
1. Data Controller
The data controller for personal data collected through RGPDCheck is:
- Owner: Luis Noguera Bergas
- NIF/CIF: 43144201L
- Address: C/ Teodoro Canet, 2, 07400 Alcúdia, Illes Balears, España
- Email: l.noguera83@gmail.com
- Data Protection Officer (DPO): l.noguera83@gmail.com
2. Personal Data We Collect
We may collect and process the following data:
- Identification data: name, email (via registration or Google OAuth).
- Browsing data: IP address, cookies, device, browser.
- Service data: scanned URLs, scanner results, conversations with the AI chatbot, generated reports.
- Payment data: managed entirely by Stripe. We do not store card numbers.
- Contact data: email, sector, country (via lead forms or expert registration).
3. Purpose and Legal Basis
| Purpose | Legal basis |
|---|---|
| Service provision (scanner, chatbot, reports) | Art. 6.1.b RGPD (ejecución contrato) |
| Payment and credit management | Art. 6.1.b RGPD (ejecución contrato) |
| Expert marketplace (lead-expert match) | Art. 6.1.b RGPD (ejecución contrato) / Art. 6.1.a (consentimiento) |
| Service communications (transactional emails) | Art. 6.1.b RGPD / Art. 6.1.f (interés legítimo) |
| Service improvement and statistical analysis | Art. 6.1.a RGPD (consentimiento — cookies analíticas) |
| Compliance with legal obligations | Art. 6.1.c RGPD |
4. Data Retention
- Account data: while your account is active. After cancellation, blocked for 5 years (legal statute of limitations).
- Chatbot conversations: 12 months from last interaction, unless legal obligation to retain.
- Scanner results: 24 months.
- Payment data (Stripe): according to Stripe policy and tax obligations (6 years).
5. Recipients and Transfers
Your data may be disclosed to:
- Stripe, Inc. — payment processing (USA). Safeguards: EU Commission Standard Contractual Clauses.
- Resend, Inc. — transactional email delivery (USA).
- Google LLC — OAuth authentication (USA).
- Proveedor de hosting — data storage on EU servers (verify location with your host).
- Expertos verificados — only when you hire their services through the marketplace.
6. Your Rights
You can exercise the following rights by contacting the DPO at l.noguera83@gmail.com:
- Right of access
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to object
- Right to restriction of processing
- Right to data portability
- Right not to be subject to automated decision-making (including profiling)
Response time: 1 month (extendable to 2 months for complexity). You may also lodge a complaint with the AEPD (www.aepd.es).
7. Security Measures
We apply the following measures:
- SSL/TLS connection across the entire site.
- JWT authentication with expiration.
- Rate limiting on APIs.
- Restricted database access.
- Data pseudonymization in logs.
8. Changes to this Policy
We may update this policy. We will notify you by email or through a notice on the website if changes are substantial. Last updated: July 30, 2026.