Privacy Policy
In compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).
1. Data controller
The data controller for personal data collected through the website qaproveche.com is Q'aproveche, with contact email: hola@qaproveche.com.
2. Data we collect and why
| Data category | Purpose | Legal basis | Retention period |
|---|---|---|---|
| Name and email address (contact form / demo) | Respond to enquiries and manage demo requests | Legitimate interest / consent | 12 months from last contact |
| Access credentials (panel users) | Service provision and authentication | Contract performance | Contract duration + 5 years |
| Restaurant data (name, phone, address) | Digital menu configuration and presentation | Contract performance | Contract duration |
| Navigation data and technical cookies | Website functionality | Legitimate interest | Session / 12 months |
| Analytics data (if analytical cookies accepted) | Service improvement | Consent | 26 months |
3. Who we share data with
Q'aproveche does not sell or disclose personal data to third parties for commercial purposes. Data may be shared with:
- Hostinger International Ltd. — web hosting provider (EU, servers in the EU).
- Google LLC — via Google Fonts (typefaces loaded from their servers). Only if non-essential cookies are accepted.
- Competent authorities — when legally required.
All providers act as data processors under GDPR-compliant contracts.
4. International transfers
Hostinger processes data within the European Economic Area. For transfers to third countries (e.g. Google LLC in the USA), Standard Contractual Clauses approved by the European Commission or other appropriate safeguards apply.
5. Your rights
You may exercise the following rights at any time by writing to hola@qaproveche.com with the subject "Exercise of GDPR rights":
- Access — obtain confirmation of what data we process about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion when no longer necessary.
- Objection — object to processing based on legitimate interest.
- Restriction — request that we suspend processing in certain cases.
- Portability — receive your data in a structured, machine-readable format.
- Not to be subject to automated decisions — we do not make decisions with significant effects based solely on automated processing.
We will respond to your request within 30 days. If you believe the processing is non-compliant, you may lodge a complaint with the Spanish Data Protection Authority (AEPD).
6. Security
We apply appropriate technical and organisational measures: HTTPS/TLS encryption for all communications, passwords stored with hash password_hash() (Argon2id), secure sessions with cookie HttpOnly y SameSite, and role-based access restrictions.
7. Cookies
We use essential technical cookies for panel functionality and, with your consent, analytical cookies. See our Cookie Policy for more information.
8. Minors
The service is aimed at businesses and professionals. We do not knowingly collect data from minors under 14 years old. If we discover that data from minors has been provided without parental consent, we will delete it immediately.
9. Changes to this policy
We may update this policy as needed. For substantial changes, we will notify you by email or prominent notice on the website. The last update date appears at the top of this document.
10. Contact
For any privacy-related enquiries: hola@qaproveche.com