Privacy and cookies

Data controller

Owner

UPALUP AI, S.L. (sociedad unipersonal)

Tax ID (NIF)

B05702899

Registered office

Calle Salvador Ferrer Maura, 26, 17003 Girona, España

Registry

Registro Mercantil de Girona, hoja GI-80054, inscripción 1.ª

Contact

pablo@droidbazaar.com

What data we handle and why

Account: your name, email and an encrypted password, to identify you and give you access. Legal basis: providing the service you ask for (contract).

What you post: listings, wanted requests, questions and answers, photos and company pages. They are published on the site under the name you choose; that is their purpose. Legal basis: contract.

Marketplace messages: when you contact a seller, we show them your message, name and email so they can reply. The seller's email is not shown to the buyer. Legal basis: contract.

Email notices: account confirmation, password reset, messages received and the alerts you turn on. Legal basis: contract.

Security: when you sign in we store the session's IP address and browser, and the server logs technical data about visits, to protect accounts and prevent abuse. Legal basis: legitimate interest.

Statistics: we count visits and actions (for example playing a video or contacting a seller) with Umami, running on our own server in the European Union. It uses no cookies, does not store your IP and cannot identify you. Legal basis: legitimate interest.

Company directory: company pages are built from each company's public information (name, website, country, brands and services). We may write to the company's contact address so it can review or claim its page. Legal basis: legitimate interest. Any company can ask us to correct or remove its page.

If you email us, we use your details only to reply.

Who we share it with

We do not sell your data or use it for advertising. Only these providers handle it, on our behalf:

Hetzner Online (Germany): servers hosting the site, database, photos and statistics.

Resend (United States): sends the site's emails. It receives your email address and the message content.

Cloudflare (United States): manages the domain and forwards emails you send us to our mailbox, hosted by Google (Gmail).

Transfers outside the European Union rely on GDPR safeguards (the EU-US adequacy decision or standard contractual clauses).

Videos: YouTube and Vimeo videos do not load until you press play. From then on, those platforms may process your data under their own policies.

How long we keep it

Account data, for as long as you keep your account. Listings expire after two years at most. If you delete your account, we erase your personal data; backups are made daily and deleted after 14 days.

Technical security data is kept only as long as needed for that purpose.

Cookies

We only use technical cookies, which need no consent: the session cookie that keeps you signed in, and one that remembers whether you prefer metric or imperial units. We use no advertising or tracking cookies.

Your rights

You can ask to access, correct or erase your data (including deleting your account), restrict or object to its use, and take it to another service, by writing to pablo@droidbazaar.com from your account's email. You can change much of it yourself in your profile.

If you think we have mishandled your data, you can complain to the Spanish Data Protection Agency (aepd.es) or the authority in your country.

Changes

If we change this policy, we will publish the new version here with its date. For significant changes we will email registered users.