1. Data Controller
The data controller responsible for processing your personal data is:
Joaquín Lavalle, (EDICIONES OFISA), Faceslay Platform
Av.Mallorca7-07181-SoldeMallorca,Mallorca Spain
Email: faceslay@spain.cc
2. Personal Data We Collect
We collect the following data:
- Registration and authentication data: name, email, password, profile picture.
- User-generated content (UGC): photos, videos, texts, comments, descriptions.
- Technical data: IP address, browser type, operating system, cookies, approximate geolocation.
- User preferences and communication settings.
3. Purpose of Processing
Your data is processed to:
- Manage the platform and user experience.
- Send relevant notifications, updates, or important communications.
- Improve the service through statistical and technical analysis.
- Comply with legal and regulatory obligations.
4. Legal Basis
The processing of your data is based on:
- Explicit user consent.
- Contractual necessity and transaction management.
- Legitimate interests of the controller (service improvement, security).
- Compliance with legal obligations.
5. Data Retention
- User registration and authentication data, including email, password and account creation date, will be retained until the user deletes their account. User generated content (UGC) will remain on the platform while it is published, unless the user requests its removal; Faceslay may retain backup copies for technical or legal reasons in accordance with applicable law. Technical, usage and cookie data will be retained for up to 1 year, depending on the purpose for which it was collected and the consent provided by the user. Faceslay reserves the right to delete, anonymise or archive data where necessary to comply with legal or regulatory obligations.
6. User Rights
Users may:
- Access, correct, or delete their data.
- Restrict or object to processing.
- Request data portability.
- Withdraw consent at any time.
- File complaints with the Spanish Data Protection Agency (AEPD).
To exercise these rights, contact faceslay@spain.cc.
7. International Transfers
Your data may be transferred to service providers located outside the EU, ensuring appropriate security measures and standard contractual clauses according to GDPR.
8. Security
We implement technical and organizational measures to protect your data:
- Encryption of passwords and communications.
- Restricted access for authorized personnel.
- Periodic monitoring and backups.
9. Cookies
We use cookies and similar technologies as described in our Cookies Policy, with user consent.
10. Changes to the Policy
We reserve the right to modify this policy at any time. The last update date is indicated at the beginning of the document.