Legal Information
Complete legal documentation for WebCodeSystems services and data handling practices.
Privacy Policy
Effective Date: January 1, 2026 | Last Updated: January 1, 2026
This Privacy Policy describes how WebCodeSystems ("we," "us," or "our") collects, uses, processes, and protects your personal data when you visit our website at webcodesystems.com or engage our services. This policy complies with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Spanish Ley Orgánica 3/2018 de Protección de Datos Personales.
§1 Data Controller
Company Name: WebCodeSystems
Registered Address: Calle Alameda Principal 10, 29005 Malaga, Spain
Email: [email protected]
Phone: +34 638 90 15 42
Data Protection Officer: Not applicable for enterprises under 250 employees per Article 37 GDPR. However, all data processing activities are supervised internally by the Engineering Lead.
§2 Data We Collect
WebCodeSystems collects the following categories of personal data:
- •Identity Data: Full name, company name, job title provided through contact forms.
- •Contact Data: Email address, phone number, physical address provided during project engagement.
- •Technical Data: IP address, browser type/version, operating system, referring URLs, and page interaction data collected automatically through server logs.
- •Project Data: Business requirements, technical specifications, and source code shared by clients during active engagements under NDA.
- •Payment Data: Transaction IDs and billing information processed exclusively through Stripe. We do not store credit card numbers on our servers.
§3 How We Process Your Data
We process personal data under the following legal bases as defined in Article 6 of the GDPR:
- •Contractual Necessity (Art. 6(1)(b)): Processing required to fulfill our contractual obligations when you engage WebCodeSystems for development services.
- •Legitimate Interest (Art. 6(1)(f)): Processing for direct marketing, service improvement, fraud prevention, and IT security measures.
- •Consent (Art. 6(1)(a)): Where you have given explicit consent for specific processing activities such as newsletter subscriptions.
§4 Data Sharing & Third Parties
WebCodeSystems does not sell your personal data. We share data only with the following categories of processors:
- •Infrastructure Providers: Cloud hosting providers (AWS, GCP, or DigitalOcean) for data storage and application deployment, all operating under Standard Contractual Clauses.
- •Payment Processors: Stripe for payment transaction processing. Stripe operates under their own GDPR-compliant privacy policy.
- •Communication Tools: Email service providers for transactional and project-related communications.
- •Legal Authorities: When required by law, court order, or regulatory obligation under Spanish and EU law.
§5 Data Retention
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected:
- •Contact Form Submissions: Retained for 24 months from the date of submission for follow-up purposes.
- •Project Data: Retained for the duration of the project engagement plus 12 months post-completion for warranty and support obligations.
- •Server Logs: Automatically purged after 90 days.
- •Financial Records: Retained for 6 years as required by Spanish tax law (Ley General Tributaria).
§6 Your Data Rights
Under the GDPR and Spanish data protection law, you have the following rights:
- •Right of Access (Art. 15): Request a copy of all personal data we hold about you.
- •Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal data.
- •Right to Erasure (Art. 17): Request deletion of your personal data where there is no compelling reason for continued processing.
- •Right to Restriction (Art. 18): Request restriction of processing in certain circumstances.
- •Right to Portability (Art. 20): Receive your personal data in a structured, commonly used, machine-readable format.
- •Right to Object (Art. 21): Object to processing based on legitimate interests, including direct marketing.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days as required by GDPR.
§7 Data Security
WebCodeSystems implements appropriate technical and organizational measures to protect personal data:
- •TLS 1.3 encryption for all data in transit
- •AES-256 encryption for data at rest on server infrastructure
- •Regular security audits and vulnerability assessments
- •Role-based access controls (RBAC) for all internal systems
- •Automated daily backups with 30-day retention
- •Incident response procedures aligned with ENISA guidelines
In the event of a personal data breach, we will notify the Agencia Española de Protección de Datos (AEPD) within 72 hours as required by Article 33 of the GDPR.
§8 Contact & Complaints
For any questions about this Privacy Policy or to exercise your data rights:
Email: [email protected]
Address: Calle Alameda Principal 10, 29005 Malaga, Spain
You also have the right to lodge a complaint with the supervisory authority:
Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6, 28001 Madrid, Spain
www.aepd.es