Privacy Policy

1. Data controller

Controller: Alberto Tundidor, trading as Birlo.

Tax ID (NIF): 12.390.969-H

Business address: Medio 36, 47191 Ciguñuela (Valladolid), Spain.

Email: info@birlo.es

Website: birlo.es

2. What data we may process

Depending on how you use birlo.es, Birlo may process the following categories of data:

• Identification and contact data: first name, surname, email address, postal address, telephone number and other information provided during a purchase, enquiry or support request.
• Billing data: billing address, NIF/CIF/VAT ID, country, order information, amounts, taxes and documentation required to comply with accounting and tax obligations.
• Account data: encrypted credentials, order history, downloads, licenses and preferences associated with the customer account.
• License data: purchased product, license key or identifier, status, activation and expiry dates, number of activations and associated domains or installations where necessary to provide the licensing service.
• Support data: messages, files, screenshots, technical information and any other data voluntarily provided by the user to resolve an issue.
• Technical and browsing data: IP address, browser, device, security logs, pages visited and similar information where necessary for security, website operation or, where applicable, consent-based analytics.

3. What we use the data for

Birlo processes personal data for the following purposes:

• Managing user registration and accounts.
• Processing purchases, payments, invoicing, downloads and orders.
• Generating, activating, validating, renewing and administering software licenses.
• Providing updates, documentation and technical support.
• Responding to enquiries received through contact channels.
• Preventing fraud, abuse, unauthorized access and other security incidents.
• Complying with legal, tax, accounting and administrative obligations.
• Obtaining usage or performance statistics where the necessary consent has been provided for non-essential technologies.

4. Legal bases

The legal bases for these processing activities are, depending on the case:

• Performance of a contract or pre-contractual measures: to process orders, deliver digital products, manage licenses, downloads and support.
• Compliance with legal obligations: especially in tax, accounting, consumer protection, fraud prevention and data-subject rights.
• Legitimate interests: to maintain website security, prevent abuse, retain technical evidence and improve service stability, provided the user's rights and interests do not override those interests.
• Consent: where required for cookies, analytics, optional communications or other processing activities that require it.

5. Payments

Payments made on birlo.es are processed by external payment service providers. Card payments, Revolut Pay and, where applicable, Apple Pay or Google Pay may currently be available.

Birlo does not store full payment-card details. The payment provider processes the information required to authorize and execute the transaction under its own terms and privacy policies.

6. WooCommerce and order management

The store uses WooCommerce to manage the catalog, cart, checkout, orders and customer accounts. Data entered during a purchase is stored on birlo.es infrastructure for as long as necessary to manage the contractual relationship and comply with applicable legal obligations.

7. Licenses and activations

Birlo's commercial products may use an in-house license management system. To validate a license, it may be necessary to process technical information linked to the installation, such as the website domain or URL, product, version, activation status and other technical identifiers required to verify the number of authorized installations.

This data is used solely to administer licenses, provide updates, prevent fraudulent use and provide support.

8. Support and communications

When you contact Birlo, the information you provide will be processed to respond to your enquiry or resolve the issue. You should not send passwords, private keys or especially sensitive information unless strictly necessary and a secure channel has been agreed in advance.

9. Cookies, analytics and third-party services

birlo.es uses Complianz to manage consent for cookies and similar technologies. Detailed information about cookies, categories, duration and detected services is available in the Cookie Policy.

The website may integrate measurement tools or Google services through Site Kit or other integrations. Where these tools require consent, they should not be activated until the user has granted it through the consent system.

10. Recipients and processors

Birlo may provide data, only where necessary, to providers that supply services essential to the operation of the business, such as:

• web hosting and infrastructure;
• email and message-delivery services;
• payment gateways and payment providers;
• backup, security and maintenance services;
• tax, accounting or legal advisers where necessary;
• technology providers used to deliver contracted services.

These providers will process data in accordance with applicable law and, where appropriate, as processors subject to the relevant contractual obligations.

11. International transfers

Some technology providers may process data outside the European Economic Area. Where an international transfer takes place, Birlo will seek to ensure that it is based on a mechanism recognized by applicable law, such as an adequacy decision, standard contractual clauses or other valid safeguards.

12. Retention periods

Data will be retained for as long as necessary to fulfil the purpose for which it was collected and subsequently for the periods required by applicable law.

• Order and billing data may be retained for the tax and accounting periods required by law.
• License data will be retained while the license is active and for as long as reasonably necessary to manage renewals, support, fraud prevention or claims.
• Support data will be retained for as long as necessary to deal with the issue and for a reasonable period afterwards to maintain a technical history.
• Data processed solely on the basis of consent will be processed until consent is withdrawn, without affecting the lawfulness of processing carried out before withdrawal.

13. Data subject rights

Where applicable, you may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability.

You may also withdraw your consent at any time where processing is based on consent.

To exercise these rights, email info@birlo.es, stating the right you wish to exercise and, where necessary, providing sufficient information to verify your identity.

If you believe that the processing of your personal data infringes applicable law, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).

14. Minors

Birlo's services are not specifically directed at minors. Personal data relating to minors should not be provided without any authorization legally required.

15. Security

Birlo applies reasonable technical and organizational measures to protect personal data against loss, alteration, unauthorized access, disclosure or destruction. However, no Internet-connected system can guarantee absolute security.

16. Automated decision-making

As a general rule, Birlo does not make decisions based solely on automated processing that produce legal effects or similarly significantly affect users. Certain systems may apply automatic security, fraud or license-validation checks without this constituting automated decision-making of that kind.

17. Changes to this policy

Birlo may update this policy when services, providers, processing activities or legal requirements change. The version published on this page will be the version in force at any given time.

18. Contact

For any question related to privacy or data protection, email info@birlo.es.