Privacy
Privacy policy
In short: this website uses no cookies, analytics or advertising, and has no forms. We only process personal data if you email us, and only to reply to you. We never sell or share your data.
1. Data controller
- ControllerDaniel Martínez Pascual (Palmeras)
- Emailhello@palmeras.app
Given the volume and nature of the data we process, we are not required to appoint a Data Protection Officer. For any privacy question, email us at the address above.
2. What data we process, why and on what basis
We apply data minimisation: we only process the data strictly needed for each purpose.
| When | Data | Purpose | Legal basis |
|---|---|---|---|
| When you visit the website | Technical connection data: IP address, date and time, requested page, browser and operating system. | Serving the website and protecting it from attacks and abuse. It is logged automatically by the hosting provider; we don't use it to identify you or build profiles. | Legitimate interest in keeping the website available and secure (Art. 6(1)(f) GDPR). |
| If you email us | Your email address, your name if you include it, and the content of your message. | Reading and replying to your question, proposal or comment. | Your consent when you write to us (Art. 6(1)(a) GDPR) and, if you ask about a collaboration, taking steps prior to a contract (Art. 6(1)(b) GDPR). |
| If you ask for app support | Your email, your message and anything you choose to attach (device model, OS version, screenshots). | Solving the issue and improving the app. | Your consent (Art. 6(1)(a) GDPR) and our legitimate interest in our apps working well (Art. 6(1)(f) GDPR). |
We don't make automated decisions or build profiles. We don't process special categories of data (health, beliefs, etc.); please don't send them to us by email.
Giving us your data when you write is voluntary, but without an email address we couldn't reply.
3. How long we keep it
- Technical connection data: for as long as the hosting provider keeps it for security purposes, usually days or weeks, and never longer than needed.
- Emails and support: while the conversation lasts and then for a maximum of 2 years so we can handle related questions, unless you ask us to delete them sooner. If there is a contractual relationship, for as long as the law requires to handle potential liabilities.
4. Recipients and processors
We don't sell, rent or share your data with third parties, except where required by law (for example, a court order).
To operate, we rely on two kinds of technical providers acting as data processors: they may only use the data to provide their service to us and under our instructions:
- Web hosting, which serves palmeras.app.
- Email, through which we receive and answer your messages.
If you want to know which specific companies they are, email us and we'll tell you.
5. International transfers
Some technology providers may process data outside the European Economic Area, for example in the United States. We only work with providers that offer appropriate safeguards under the GDPR: participation in the EU-US Data Privacy Framework, the European Commission's standard contractual clauses or another valid mechanism. You can ask us for more information about these safeguards.
6. Your rights
You can exercise these rights free of charge at any time:
- Access: find out whether we process your data and get a copy.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete your data.
- Objection: object to processing based on legitimate interest.
- Restriction: ask us to keep your data but temporarily stop using it.
- Portability: receive your data in a structured, commonly used format.
- Withdraw your consent at any time, without affecting prior processing.
To exercise them, email hello@palmeras.app stating which right you want to exercise. If we have reasonable doubts about your identity, we may ask for additional information to confirm it. We'll reply within one month at most.
If you believe we haven't handled your data properly, you can file a complaint with the Spanish Data Protection Agency (C/ Jorge Juan, 6, 28001 Madrid, Spain · www.aepd.es) or with the supervisory authority of your country of residence in the EU. We'd appreciate it if you wrote to us first so we can try to fix it.
7. Children
This website is not specifically aimed at children and does not actively collect data. If you are under 14, please don't send us personal data without permission from a parent or guardian. If we find out we have received data from a child under 14 without that consent, we will delete it.
8. Security
The website is always served encrypted (HTTPS) and loads no third-party resources: typefaces and libraries are hosted on our own domain. We apply reasonable technical and organisational measures to protect data from unauthorised access, loss or alteration. If a data breach affecting you ever occurred, we would notify you where the law requires.
9. Cookies and storage on your device
This website sets no cookies and does not store or read any information on your device (including via localStorage, sessionStorage or similar technologies), whether our own or third-party. We use no analytics tools, pixels, advertising or social media buttons. That's why we don't need your consent or a cookie banner.
10. Privacy in our apps
Each Palmeras app has its own privacy policy, tailored to what that app does, linked from its App Store and Google Play listing and from this website. When you download an app, Apple or Google also process certain data (such as your account or purchases) as independent controllers under their own policies.
11. Changes to this policy
We may update this policy if our processing or the law changes. The version in force will always be published on this page with its update date and, if the change is significant, we'll highlight it visibly.