This English version is provided for convenience only. If it differs from the Spanish version, the Spanish version prevails.
1. Data controller
- Controller
- Uelta SLU (Uelta)
- Tax ID (NIF)
- B05694336
- Registered address
- Calle de Benjamín Palencia, 30
- Privacy contact
- uelta.app@gmail.com
This policy complies with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Act 3/2018 on Personal Data Protection and the guarantee of digital rights (LOPDGDD).
2. What data we process, why and for how long
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Replying to your demo or information request | Name, company, email, telephone, number of venues and message | Taking pre-contractual steps at your request (art. 6.1.b GDPR) | Until the request is dealt with and, at most, 1 year afterwards |
| Sending you commercial news from Uelta | Name and email | Your consent (art. 6.1.a GDPR), which you can withdraw at any time | Until you withdraw your consent |
| Managing the contract with our customers, invoicing and support | Identification and contact details of the customer’s representatives, invoicing data | Performance of the contract (art. 6.1.b) and legal obligations (art. 6.1.c) | For the duration of the contract and afterwards for the statutory commercial and tax periods (up to 6 years) |
| Security and operation of the platform | Technical logs: IP address, date and time, browser and pages requested | Legitimate interest in protecting the service (art. 6.1.f) | The time strictly necessary, at most 12 months, unless there is a security incident |
3. Data of venues’ customers
When a leisure venue uses Uelta to manage its bookings, sales and customers, the venue is the controller of that data and Uelta processes it only on the venue’s behalf and following its instructions, as data processor (see the data processing agreement). If you are a customer of a venue, exercise your rights with that venue; if a request reaches us, we will forward it to them.
4. Recipients
We do not disclose your data to third parties except where legally required. The following providers process it on our behalf, under the corresponding contract:
- Hostinger International Ltd.: server hosting and email delivery. Server location: Union Europea.
- Google Ireland Limited: only if you choose “Sign in with Google”. This may involve transfers to the US, covered by the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses.
5. Your rights
You may at any time request access to, rectification or erasure of your data, object to its processing or ask for it to be restricted, request its portability and withdraw any consent you have given. Write to us at uelta.app@gmail.com with some detail that allows us to verify your identity. We will reply within one month.
If you believe we have not handled your data properly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) (C/ Jorge Juan 6, 28001 Madrid, www.aepd.es).
6. Other information
- We do not take automated decisions or carry out profiling with legal effects on you.
- Our services are aimed at businesses. If you are under 14, do not send us your data.
- Security measures: HTTPS encryption on all connections, hashed passwords, encrypted email credentials and permissions by role and by venue.
- If we change this policy, we will publish the new version here with its date.