Privacy Policy
This is a courtesy translation. In case of any discrepancy, the Spanish version of this document shall prevail.
Last updated: 19 June 2026
At Descarboniza, we take your privacy seriously. This policy explains what personal data we process, for what purpose and on what legal basis, who we share it with, and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).
1. Data controller
Controller: Jesús Morán Morán (Tax ID 44789317Z), owner of Descarboniza.es.
Address: Calle Villafranca 77, 06200 Almendralejo (Badajoz), Spain.
Contact email: hola@descarboniza.es
No Data Protection Officer has been appointed, as it is not legally required. For any privacy-related query, please write to the address above.
2. Data we process
Depending on your relationship with the platform, we may process:
- Account and identification data: name and email address. If you register with Google, we receive basic profile information (name and photo). Authentication is handled by Clerk.
- Payment data: if you take out a paid plan, the payment is processed by Stripe. We do not store your card details.
- Newsletter subscription data: your email address, if you subscribe (managed via MailerLite).
- Browsing and usage data: IP address, cookie identifiers, pages visited and usage events, via Google Analytics and Vercel's infrastructure.
- Communications: the content of messages you send us via forms or email.
- Data on directory companies and professionals: sector information obtained from public sources, which may include personal data of professionals (see section 9).
3. Purposes and legal basis
- Creating and managing your account and providing you with the platform's services — performance of a contract (Art. 6.1.b GDPR).
- Processing payments and issuing the corresponding invoices — performance of a contract and compliance with legal obligations (Art. 6.1.b and c).
- Sending you the newsletter and commercial communications — your consent (Art. 6.1.a).
- Analysing platform usage through analytics cookies — your consent (Art. 6.1.a).
- Ensuring security, preventing fraud, and maintaining and improving the sector directory — legitimate interest (Art. 6.1.f).
- Handling your requests and complying with legal obligations — legitimate interest and legal obligation.
4. Recipients and data processors
We do not sell or rent your personal data. To provide the service we rely on providers that process it on our behalf (data processors), with whom we maintain contracts in accordance with Art. 28 GDPR:
- Clerk — Clerk, Inc. (USA). Authentication, login and user account management. Privacy policy.
- Stripe — Stripe Payments Europe, Ltd. (Ireland) and Stripe, Inc. (USA). Processing of subscription payments. We do not store card data. Privacy policy.
- Airtable — Formagrid, Inc. (USA). Hosting of directory and form data. Privacy policy.
- MailerLite — UAB «MailerLite» (Lithuania, EU). Sending the newsletter and communications to subscribers. Privacy policy.
- Vercel — Vercel, Inc. (USA). Web hosting, CDN and technical activity logs. Privacy policy.
- Resend — Resend (USA). Sending transactional emails (verification, service notices). Privacy policy.
- Google — Google Ireland Ltd. / Google LLC. Google Analytics (usage measurement) and Google login. Privacy policy.
We may also disclose data to public authorities or bodies where there is a legal obligation to do so, and to advisors or providers to the extent necessary to manage our relationship with you.
5. International transfers
Some of these providers are located outside the European Economic Area, mainly in the United States. Such transfers are carried out with the appropriate safeguards provided for under the GDPR: Standard Contractual Clauses approved by the European Commission and/or the providers' certification under the EU-US Data Privacy Framework (European Commission adequacy decision). You may request information about these safeguards at hola@descarboniza.es.
6. Retention periods
- Account data: for as long as your account remains active. After you request account closure, we delete or anonymise it within a maximum of 30 days, unless we are legally required to retain it.
- Billing data: 6 years, in accordance with commercial and tax regulations.
- Newsletter: until you withdraw your consent (unsubscribe).
- Browsing and analytics: for the retention period configured in the analytics tool (generally up to 14 months).
- Requests and communications: for as long as necessary to handle them and for the statutory limitation periods for any potential liabilities.
7. Your rights
You may exercise, at any time, your rights of access, rectification, erasure, objection, restriction of processing and portability, as well as withdraw any consent you have given (without affecting the lawfulness of processing prior to withdrawal), by writing to hola@descarboniza.es. We may ask you to verify your identity.
If you believe we have not processed your data correctly, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid — www.aepd.es.
8. Cookies
We use our own and third-party cookies. Non-essential cookies (for example, analytics cookies) are only activated with your consent, which you may grant, manage or withdraw at any time. You will find further detail in our Cookie Policy.
9. Third-party data in the directory
Descarboniza maintains a directory of sustainable-construction companies and professionals. Part of this information comes from publicly available sources (corporate websites, registers and published environmental declarations) and may include personal data of professionals, such as a contact name. The legal basis for this processing is our legitimate interest in offering a useful sector directory. If you appear in the directory and wish to rectify your data or object to its inclusion, write to us at hola@descarboniza.es and we will address it.
10. Minors
The platform is not directed at persons under 14 years of age and we do not knowingly collect their data. If we discover that we have processed the data of a minor under that age without the corresponding authorisation, we will delete it.
11. Data security
We apply appropriate technical and organisational measures (encryption in transit, access controls, and providers with recognised security standards) to protect your data against unauthorised access, alteration, disclosure, loss or destruction.
12. Automated decisions
We do not make decisions based solely on automated processing, nor do we create profiles, that produce legal effects concerning you or similarly significantly affect you.
13. Changes to this policy
We may update this policy. We will publish the version in force on this page and indicate the date of the last update; material changes will be communicated where appropriate.
14. Contact
For any question about this policy or about the processing of your personal data, write to us at hola@descarboniza.es.