Privacy

Privacy policy.

At Woblip we take the protection of your personal data seriously. This policy explains how we process the information you provide through woblip.com, in accordance with Regulation (EU) 2016/679 (GDPR) and the Spanish Organic Law 3/2018, of 5 December, on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD).

Data controller

  • Company name: Grumpy Software, S.L.
  • Tax ID (CIF): [Tax ID pending]
  • Registered address: [Address pending], Spain
  • Contact email: [email protected]
  • Data Protection Officer (DPO): Not designated as the cases in article 37 GDPR do not apply. For any privacy matter you can write to [email protected].

Purposes of processing and legal basis

We process your personal data for the following purposes and on the following legal bases:

  • Handle enquiries and information requests: reply to messages sent through the contact form or by email. Legal basis: consent (art. 6.1.a GDPR) and, where applicable, pre-contractual measures requested by the data subject (art. 6.1.b GDPR).
  • Manage demo requests and commercial processes: arrange demos, send quotes, proposals and follow up on commercial conversations related to Woblip. Legal basis: pre-contractual measures (art. 6.1.b GDPR).
  • Comply with legal obligations: retain accounting, tax or administrative documentation as required by applicable regulations. Legal basis: compliance with a legal obligation (art. 6.1.c GDPR).
  • Send electronic commercial communications: only when there is a prior client relationship regarding similar products or services (art. 21.2 LSSI), or when you have given express consent. Legal basis: legitimate interest (art. 6.1.f GDPR) or consent (art. 6.1.a GDPR), as the case may be. You may object or unsubscribe at any time.

Categories of data processed

Depending on the channel and purpose, we may process the following categories of data:

  • Identifying data: first and last name.
  • Contact data: email address and, where applicable, phone number.
  • Professional data: company, role and activity sector when you provide them.
  • Communication content: message, enquiry or information you voluntarily share.
  • Technical and browsing data: IP address, device type, browser and website usage data. See our cookie policy for more detail.

We do not process special categories of data (art. 9 GDPR). Please do not send sensitive information through the forms or contact email.

Retention periods

  • Data provided through contact or demo request forms will be kept for the time needed to handle your request and, unless you object, for a maximum of 2 years for commercial follow-up.
  • If we enter into a contractual relationship, data will be kept while it is in force and afterwards for the periods legally required to address potential liabilities (commercial, tax, accounting, etc.).
  • Data processed on the basis of your consent will be kept until you withdraw it.

Once the applicable periods have elapsed, the data will be deleted or, where appropriate, duly blocked under article 32 LOPDGDD.

Recipients and international transfers

We do not share your data with third parties unless legally required. We do use providers acting as data processors on our behalf and under contract pursuant to article 28 GDPR, in categories such as:

  • Web hosting and cloud infrastructure.
  • Form and email reception and routing.
  • Productivity, CRM and commercial support tools.
  • Website analytics services.

Some of these providers may be located outside the European Economic Area. In that case, international transfers are made under the safeguards in Chapter V of GDPR: European Commission adequacy decisions, Standard Contractual Clauses approved by the Commission and, where necessary, additional measures ensuring an equivalent level of protection. You can request more information about these safeguards by writing to [email protected].

User rights

As a data subject, the data protection regulations grant you the following rights, which you may exercise free of charge:

  • Access: know what data we are processing about you and obtain a copy.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure ("right to be forgotten"): request the deletion of your data when, among other reasons, it is no longer necessary for the purpose for which it was collected.
  • Objection: object to the processing of your data in the cases provided by law, in particular for marketing purposes.
  • Restriction: request that we limit processing in the cases set out in GDPR.
  • Portability: receive the data you provided in a structured, commonly used, machine-readable format and transmit it to another controller.
  • Withdrawal of consent: withdraw your consent at any time, without affecting the lawfulness of processing prior to withdrawal.
  • Not to be subject to automated decisions with significant legal effects, except in the cases legally allowed.

To exercise these rights you can write to [email protected] stating the right you wish to exercise and attaching, if necessary, a document proving your identity. We will respond within the legal deadlines.

Claim before the supervisory authority

If you believe that the processing of your data does not comply with the regulations, or that we have not properly handled the exercise of your rights, you can file a claim with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid, through their electronic site at www.aepd.es.

Data security

We apply appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with article 32 GDPR, including encryption in transit, access controls and periodic review procedures.

Changes to the privacy policy

We may update this policy to adapt it to legislative or judicial developments or changes in our practices. Any changes will be published on this same page, indicating the date of last update.