Privacy Policy

Data controller

The controller of personal data is Juan Manuel Sanchez Magdaleno, NIF 46733333R, domiciled at C/ Salvador Ferré nº 2, Local 2, 43810 El Pla de Santa Maria (Tarragona, Spain).

For any data protection matter you may contact the controller at [email protected]. Zelora has not appointed a Data Protection Officer.

1. Data We Collect

Depending on how you use our services, we may collect and process the following categories of personal data:

• Full name
• Email address
• IP address
• Account and service information
• Information required to process payments and manage billing
• Information provided when contacting our support team
• Technical data relating to the use of our services
• Browsing data and preferences where the user has provided the consent required for certain cookies or similar technologies

Data that Customers host on their own servers is governed by clause 11 of the Terms and Conditions. Processing data of children under 14 requires the consent of the holder of parental responsibility.

2. Purposes and Legal Basis for Processing

Personal data may be processed for the following purposes:

• Creating and managing the Customer's account
• Providing the purchased services
• Processing payments and managing billing
• Providing technical support and responding to inquiries
• Sending necessary communications relating to purchased services
• Preventing fraud, abuse, misuse, and security incidents
• Complying with legal and tax obligations
• Handling complaints and exercising or defending legal rights
• Analyzing website performance where an appropriate legal basis exists

The legal basis for processing may be the performance of a contract, compliance with legal obligations, Zelora's legitimate interests, or the user's consent, depending on the specific processing activity.

• Performance of the contract: creating and managing the account, providing purchased services, technical support, and communications necessary to manage the service.
• Compliance with legal obligations: billing, tax and commercial record-keeping, handling rights requests and complaints.
• Zelora's legitimate interests: infrastructure security and prevention of fraud, abuse and security incidents, as well as defense against claims.
• User consent: non-essential cookies and technologies requiring it, and commercial communications not covered by another legal basis.

The legitimate interests described above are pursued without overriding the rights and freedoms of data subjects, who may object to such processing as described in section 6.

3. Providers and Data Processors

Zelora may use technology providers and other partners necessary to provide its services, including infrastructure, hosting, email, payment, support, and technical service providers.

Where these providers process personal data on behalf of Zelora, they will be selected and managed in accordance with applicable data protection requirements.

Where the Customer uses Zelora's services to host personal data belonging to third parties and Zelora acts as a data processor, specific conditions and a Data Processing Agreement may apply.

Purchasing, payment and technical management take place through the customer area and control panels indicated on the website. Their processing is governed by this Policy and by the information provided in those environments.

Where providers are located outside the European Economic Area, data will only be transferred with the appropriate safeguards provided for in the GDPR, such as an adequacy decision or other Article 46 safeguards.

4. Data Retention

Personal data will be retained for as long as necessary to fulfill the purposes for which it was collected.

Where there is a legal obligation to retain data, it may be kept for the period required by applicable law.

Once the applicable retention periods have expired, data will be deleted or anonymized where appropriate.

Once the contractual relationship has ended, data will be kept blocked for the limitation periods of any potential liabilities and legal obligations, including tax and commercial obligations, and will then be permanently deleted.

5. Security

Zelora implements reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, destruction, alteration, or improper disclosure.

However, no system connected to the Internet can guarantee absolute security.

Credentials for the customer area and control panels are personal and non-transferable. Customers are responsible for keeping them safe and must report any unauthorized use without delay.

6. User Rights

Users may exercise the rights granted under applicable law, including:

• Access their personal data
• Request the correction of inaccurate data
• Request the deletion of their data where applicable
• Request restriction of processing
• Object to certain processing activities
• Request data portability where applicable
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at [email protected].

Zelora will respond to requests within a maximum of one month, extendable in accordance with applicable law. Exercising these rights is free of charge, without prejudice to what the law provides for manifestly unfounded or excessive requests.

7. Complaints

If you believe that the processing of your personal data does not comply with applicable law, you may lodge a complaint with the competent supervisory authority, including the Spanish Data Protection Agency (AEPD).