1. Controller
Scurnet Online S.L.U., tax ID B72755689, at C/MONTE 28, SEGUNDO, 13700 TOMELLOSO (CIUDAD REAL), ESPAÑA, is the controller. Privacy enquiries: info@scurnet.online.
2. Data, purposes and legal grounds
We minimise collection. The website may process:
- Access and security: IP address, date, user agent and technical events to deliver the site, prevent abuse and diagnose faults, based on legitimate interests (Article 6(1)(f) GDPR).
- Launch alerts: email, selected language, status and consent evidence to confirm sign-up and send authorised messages, based on consent (Article 6(1)(a)).
- DEMO account request: email, display name, role and language to take the requested pre-contractual steps and create a temporary account (Article 6(1)(b) GDPR). Pseudonymised anti-abuse identifiers are processed for the legitimate interest of service security (Article 6(1)(f)).
- Rights requests: email, language, verification token and minimal audit data to verify and fulfil the request, based on legal obligation and security (Articles 6(1)(c) and (f)).
We do not make legally significant automated decisions or build profiles.
3. Retention periods
Technical logs are normally kept for up to 30 days unless a security incident requires longer. Pending sign-ups are deleted after 7 days. A subscription remains until consent is withdrawn; it is then deleted, retaining only what is essential to demonstrate compliance during the statutory periods. Rights-request tokens expire after 24 hours. A DEMO request remains encrypted in the website queue for no more than 24 hours; its payload-free technical record is deleted after 7 days. DEMO access is revoked on the exact notified date and the identity is deleted after the bounded notification process finishes, retaining only non-identifying audit evidence where necessary.
4. Recipients and transfers
Hosting, maintenance and email providers may process data under a data-processing agreement. Data are not sold. Before email is enabled, its provider, location and safeguards will be documented. Any transfer outside the EEA will rely on an adequacy decision or standard contractual clauses and supplementary measures where appropriate.
5. Your rights
You may request access, correction, deletion, objection, restriction and portability, and withdraw consent without affecting earlier processing. Use Your data or email info@scurnet.online. We normally respond within one month. You may also complain to the Spanish Data Protection Agency at aepd.es.
6. Security and confidentiality
We apply access controls, HTTPS encryption at the proxy, database isolation, resource limits, updates, backups and email verification for destructive operations. No system is infallible; we review these measures according to risk.
7. Children and changes
The site is intended for professionals and does not knowingly collect data from children under 14. We will update this policy when processing activities or the law change, showing the date and requesting fresh consent when necessary.