Legal · mapaflow.com
Privacy Policy
Last updated: March 2025
1. Data controller
- Company:IBERSYA Consultoría S.L.
- Tax ID (CIF):B23967094
- Address:Calle Oro, 42, floor 2, door 9, Valladolid, Spain
- Contact:[email protected]
2. Data we process
We process the following personal data:
- On registration: name, email address and password (stored encrypted via bcrypt).
- During service use: diagrams and processes created, plus associated metadata (creation date, assigned owner).
- Technical data: IP address and session data required for service operation (see Cookies Policy).
We do not process special categories of data (health, political beliefs, ethnic origin, etc.).
3. Purpose and legal basis
| Purpose | Legal basis |
|---|---|
| Account management and access to Mapaflow | Performance of contract (Art. 6.1.b GDPR) |
| Storage of user diagrams and processes | Performance of contract (Art. 6.1.b GDPR) |
| Service communications (changes, technical notices) | Legitimate interest (Art. 6.1.f GDPR) |
| Compliance with legal obligations | Legal obligation (Art. 6.1.c GDPR) |
4. Retention period
Data is retained for as long as the user maintains an active account. After an account deletion request, personal data will be deleted within a maximum of 30 days, unless a legal obligation requires longer retention.
5. Recipients
Personal data is not shared with or transferred to third parties, except:
- Where required by a legal obligation.
- Technology service providers acting as data processors (hosting, database), under appropriate data processing agreements. Data is stored on servers located within the European Union.
6. Your rights
You may exercise the following rights at any time:
- Access: obtain confirmation of whether we process your data and access it.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure: request deletion of your data when it is no longer necessary.
- Portability: receive your data in a structured, commonly used format.
- Objection and restriction: object to processing or request its restriction in certain circumstances.
To exercise any of these rights, write to us at [email protected] attaching a copy of your identity document. We will respond within a maximum of one month.
If you believe that the processing of your data does not comply with the regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).
7. Amendments
We reserve the right to amend this privacy policy to reflect legislative or service changes. Any significant amendments will be communicated to registered users with reasonable notice.