Legal information
Privacy Policy
Last updated: September 17, 2026
1. Data controller
Controller: dretdigital · Tax ID (NIF): B67241109 · Av. Diagonal 523 14H, 08029 Barcelona, Spain · Privacy contact: info@dretdigital.com
2. Data we process
We process account and contact data, professional and organizational data, project content in interviews, meetings, observations, findings and actions, plus photos, audio, transcripts, documents and technical data required to provide and protect the service. Do not enter Social Security or passport numbers, medical records, banking credentials or unnecessary sensitive data.
3. Purposes and legal bases
We process data to create and administer accounts and provide requested functions (contract); store, organize and analyze project content, including AI-assisted functions (contract and consent where required); secure and improve the service (legitimate interests); comply with law (legal obligation); and send optional marketing only with revocable consent.
4. Recordings and third-party data
The person recording information must inform participants and obtain any legally required consent before recording or adding their data. The application works without recording. Project content is not used for automated decisions producing legal effects.
5. Recipients and processors
Necessary hosting, storage, security, authentication, communication and AI providers may process data under confidentiality and data-protection agreements. Disclosure may occur where legally required. We do not sell personal data or share it for cross-context behavioral advertising.
6. International transfers
Providers may process data outside the EEA. Where applicable, we use adequacy decisions, European Commission Standard Contractual Clauses and suitable supplementary safeguards.
7. Retention
We retain data while an account or project is active and as needed to provide the service, then delete or restrict it according to legal periods, claims and reasonable backup cycles. Withdrawal of consent does not affect prior lawful processing.
8. Security
We apply risk-appropriate technical and organizational measures, including access controls, project separation, protected connections and restricted storage. We investigate and report breaches when law requires.
9. European and UK rights
People may request access, correction, deletion, restriction, objection, portability or consent withdrawal at info@dretdigital.com. Identity may be verified. Complaints may be made to the Spanish Data Protection Agency or the competent local authority.
10. United States privacy rights
Where applicable under US state privacy laws, including CCPA/CPRA and current laws in Indiana and other states, residents may have rights to know, access, correct, delete, obtain a copy and opt out of certain sales, targeted advertising or profiling. We do not sell data or use it for targeted advertising. Appeals and authorized-agent requests may be sent to the contact email. We do not discriminate for exercising rights; availability depends on residence and statutory scope.
11. Children
The service is for professionals, not children under 18. We do not knowingly collect children’s data and will delete it when identified.
12. Changes and contact
We may update this policy for regulatory or service changes and will communicate material changes appropriately. Requests: info@dretdigital.com.