Privacy policy
Which personal data I process when you use certificateofauthenticityvs.online or its Spanish version, or when you order a certificate; why, for how long, and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD) and the LSSI-CE.
This English text is a translation provided for convenience. In the event of any discrepancy, the Spanish version prevails.
1. Data controller
| Owner | Juan García Nicolás |
|---|---|
| Tax ID (NIF) | 47919498X |
| Address | Altabaca de la Torre, 31, bloque 4, planta 2, puerta 413, 29650 Mijas (Málaga), Spain |
| info@certificadodeautenticidadvs.es | |
| Phone | (+34) 610 71 02 03 |
2. What data I process, why, and on what legal basis
Quote form, email, phone and WhatsApp
Data: name, email, phone number if you provide it, type of item, message and any photographs you attach. Purpose: to answer your enquiry and prepare the quote. Legal basis: your consent and steps taken at your request before entering into a contract (Art. 6(1)(a) and 6(1)(b) GDPR). Retention: for as long as needed to deal with your enquiry and, at most, one year from the last contact if you do not place an order.
Authentication and expert reports
Data: identification, contact and billing data, and the items, documents and photographs you provide, which may contain third-party data (for example, the name of the signatory or the addressee); by providing them you confirm that you are entitled to do so. Purpose: to provide the service, issue the certificate or report, and invoice. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and legal and tax obligations (Art. 6(1)(c) GDPR). Retention: for the duration of the assignment and, afterwards, for the legally required periods (generally up to 6 years for accounting and tax records). I keep a copy of the photographs of the certified item so that the certificate can be verified in the future.
Certificate verification register
The verifier shows the certificate number, the description of the item and the date of issue. It does not show any owner data. Legal basis: legitimate interest in preventing forgery of the certificates and protecting buyers (Art. 6(1)(f) GDPR).
Browsing and statistics
If you accept it in the cookie notice, I use Google Analytics to obtain aggregated statistics. Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 22.2 LSSI). More information in the cookie policy.
3. Recipients
I do not pass your data on to third parties unless required by law. I use providers who act as data processors: Sered (sered.net), the web hosting and email provider for the domain; Google (statistics, if you accept them); Meta/WhatsApp (if you choose to contact me by WhatsApp); courier companies for shipping items; and my tax adviser.
4. International transfers
Google and Meta may process data outside the European Economic Area, under the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
5. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent, by writing to info@certificadodeautenticidadvs.es. I will reply within one month. You can also lodge a complaint with the Spanish Data Protection Agency (AEPD).
6. Minors
The services are not aimed at children under 14.
7. Security and confidentiality
I apply appropriate technical and organisational measures: encrypted connection (HTTPS), restricted access, backups and secure custody of the items received. Professional confidentiality continues after the assignment has ended.
8. Changes
This policy may be updated; the date of the last revision is shown at the top.