Privacy Policy

Last updated: March 2026

Data Controller

DSPATIAL S.L. is the data controller responsible for your personal data.

Data We Collect

• Account information (name, email, company)
• Billing information (address, VAT number)
• Order and transaction history
• Support ticket communications
• Technical data (IP address, browser type) for security

Legal Basis

We process personal data based on: contractual necessity (fulfilling orders), legitimate interest (security, fraud prevention), legal obligation (tax/invoicing), and consent (marketing communications, analytics cookies).

Your Rights (GDPR)

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time

Data Retention

We retain personal data for as long as necessary to provide our services and comply with legal obligations. Transaction records are kept for the legally required period (typically 5-7 years for tax purposes).

Contact

For privacy-related requests, contact us at privacy@duy.com.

DSPATIAL S.L. — Barcelona, Spain