Privacy Policy

1. Data Controller

The data controller is Carlos Alejandro Medina (operating under the trade name RedyRedes), NIF X6639454K, with registered address at C/ Jaume I 9 bj 3ra, 08860 Castelldefels (Barcelona), Spain, and email adm@redyredes.com. At all times, we are committed to strictly complying with the General Data Protection Regulation (GDPR) and the applicable regulations in Spain.

2. Data Collected

We collect corporate identity data (name, institutional email), payment data (managed through secure providers), and technical connection information required for the operational maintenance of IT services and the management of corporate identities.

3. Purpose

The exclusive purpose of the processing is the fulfillment of the technical and operational provision of the outsourced IT services offered (identity, billing, provisioning, technical support, and continuous binding audit).

4. Legal Basis

The legal basis for the processing of your data is the execution of a contract or pre-contract for services, as well as the explicit consent collected at registration, and the legitimate interest for the preservation of the security of the technological infrastructure.

5. Conservation

The data will be kept for the duration of the provision of the service. Once finished, they will be blocked and kept for the minimum legal periods required for the attention of possible legal responsibilities and incidents.

6. Data Processors

To provide the integrated services of the platform, we delegate certain strictly technical processes to the following providers (Data Processors):

  • Clerk:Identity management, authentication, and sessions.
  • Stripe:Payment gateway and financial subscription management.
  • Vercel:Infrastructure hosting and edge computing.
  • Microsoft 365 / Google Workspace:Corporate productivity platforms if the client hires their deployments.
  • Resend:Platform for sending notifications and transactional emails.
  • Atlassian (Jira):Management of the internal ticket and support system.

7. International Transfers

The use of some data processors (such as Vercel, Clerk, Stripe or OpenAI) may involve the international transfer of data. Those located outside the European Economic Area (such as the US) rely on the EU-US Data Privacy Framework (DPF) or on the Standard Contractual Clauses of the European Commission, guaranteeing an adequate level of protection.

8. GDPR Rights

As a user, you have the right to access, rectify, delete, limit processing, request portability, and oppose the use of your data.

9. Privacy Contact

To exercise any of your privacy rights, you can email adm@redyredes.com or use the official channels of the Dashboard. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you consider it necessary.