Privacy policy

Identity and contact details required by Article 13 of Regulation (EU) 2016/679.

Controller

Jorge Díaz Monge

Tax number

51527818K

Address

C/ Río Navia 2, 28400 Collado Villalba (Madrid)

Contact

contacto@warrantsco.com

We only process the data you give us yourself. We do not buy lists and we do not obtain personal data from third parties.

• Buying a single thesis: the email address you pay with —which is the identity that opens that thesis afterwards—, the date of the charge and its reference.
• Members' area: username, name, email address, a cryptographic hash of your password —never the password itself— and the date you last signed in.
• Q&A: the name you sign with, the security you ask about and the text of the question, which is published alongside its answer inside the members' area.
• Correspondence: the content of the messages you send us and the address you write from.

This site carries no analytics, no advertising and no third-party identifiers for tracking purposes.

Every piece of data is processed for a specific purpose on an explicit legal basis:

• Granting access to a thesis you bought, and restoring it on request: performance of the sales contract (Art. 6(1)(b) GDPR).
• Granting and maintaining access to the members' area and the Q&A: performance of the arrangement agreed with the subscriber (Art. 6(1)(b)).
• Emailing you when something new is published inside the members' area: consent, given and withdrawn from your own account, and never a condition of access (Art. 6(1)(a)).
• Answering the correspondence sent to us: legitimate interest in responding to the enquiries we receive (Art. 6(1)(f)).
• Keeping the records that evidence consent and its withdrawal: compliance with a legal obligation (Art. 6(1)(c)).

The record of a thesis you bought is kept for as long as the access lasts, which is indefinitely: it is the only thing evidencing that this address paid for it. Billing data is also kept for the periods required by commercial and tax law.

Members' area data is kept while the access remains active and, afterwards, for the applicable limitation periods.

Correspondence is kept for as long as it takes to deal with the enquiry and to evidence how it was handled.

We neither sell nor share personal data with third parties. Alerts may be sent through an email service provider acting as data processor under contract and without using the data for its own purposes.

Hosting and data storage are handled by infrastructure providers that likewise act as data processors, under contracts barring any use of their own.

The market data providers behind the portfolio and the comparison tool receive requests from the server, never personal data about whoever is browsing.

Beyond these cases, data is disclosed only to the competent authorities where a legal rule requires it.

Some of these providers may process data outside the European Economic Area. Where that happens, the transfer relies on a European Commission adequacy decision or on the standard contractual clauses, with any further safeguards required.

This site uses no advertising, analytics or profiling cookies, which is why it shows no consent banner: there is nothing to consent to.

The only cookie that may be set is «wco_sesion», strictly necessary to keep the members' area session open. It is signed, holds no readable personal data, expires after thirty days and is deleted when you sign out.

Language is not stored in a cookie either: it travels in the page address itself.

We take no automated decisions and build no profiles producing legal effects or similarly significant effects on the people whose data we process.

The site is not aimed at children under fourteen and does not knowingly collect their data. If we notice that a sign-up belongs to a minor without the necessary authorisation, we delete it.

We apply reasonable technical and organisational measures to protect information against unauthorised access, loss or alteration: the site is served encrypted, passwords are stored salted and derived —never in the clear— and access to the data is limited to those who need it.

No system is invulnerable. Were a breach to occur posing a risk to your rights, we would tell you and notify the supervisory authority within the prescribed deadlines.

You can exercise the following rights at any time by writing to contacto@warrantsco.com:

• Access: find out what data of yours we process and obtain a copy.
• Rectification: correct anything inaccurate or incomplete.
• Erasure: ask us to delete data once it is no longer needed.
• Restriction: ask us to stop using it while a disagreement is resolved.
• Portability: receive in a readable format the data you gave us.
• Objection: object to processing based on our legitimate interest.
• Withdrawal of consent: at any time, without affecting the lawfulness of earlier processing.

We answer requests within one month. Members can cancel, change their card or download their invoices themselves, from the billing portal in their account.

If you believe the processing does not comply with the rules, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).

We may update this policy when the processing or the applicable rules change. The version in force is the one published on this page, carrying the date shown in its header; were a change to be substantial and to affect data processed with your consent, we would tell you before applying it.