Privacy policy

What personal data we hold, why we hold it, for how long, and what you can ask us to do with it.

Last reviewed: 05/08/2026

Controller

  • POR-RELLENAR
  • Tax ID: POR-RELLENAR
  • POR-RELLENAR
  • contacto@boegarajes.es

What we collect and why

We never see your full card number: the payment happens on Stripe’s own pages and their servers, not ours.

DataPurposeLegal basisRetention
Email address and password (stored as a bcrypt hash)Creating and running your accountPerformance of a contractWhile the account exists, plus 1 year
IP address and time of sign-up to the newsletterProving that consent was givenLegal obligation (accountability)3 years after unsubscribing
Billing name and address, and the last four digits of the cardIssuing invoices and complying with tax and accounting lawLegal obligation6 years (Commercial Code)
Sign-in and payment activity logsSecurity and fraud preventionLegitimate interest90 days

Who else processes it

These providers handle data on our behalf, under a data processing agreement:

  • Hetzner Online GmbH · Server and database hosting · Germany (EU)
  • Stripe Payments Europe, Ltd. · Subscription payments and invoicing · Ireland (EU), with transfers to the USA
  • POR-RELLENAR · Outgoing email (verification, password reset and newsletter) · Spain

Transfers outside the EU

Some of the providers above transfer data to the United States. Those transfers rely on the European Commission’s adequacy decision for the EU–US Data Privacy Framework, and on the standard contractual clauses as a fallback.

Your rights

You may ask us for access, rectification, erasure, restriction, portability, or object to a processing operation. Write to contacto@boegarajes.es from the address on the account, and we will answer within one month.

You can delete your account yourself at any time; that erases your email address and your password hash. Invoices are kept for the period tax law requires, because we are obliged to.

If you believe we are not handling your data properly, you may complain to the Spanish Data Protection Agency (aepd.es).

Automated decisions

There are none. The return estimates are applied to the auctions, not to you: nothing on this site profiles the person browsing it.