KreoConfianza privacy policy

English translation. In case of any discrepancy, the Spanish version prevails: see the Spanish version.

Last updated: 29 October 2026

1. WHO HANDLES YOUR DATA. Lucía Romero Robles (KreoWeb), whose NIF and address are given in the Legal notice. Contact: soporte@kreoweb.io · phone 858 69 75 24 (Monday to Friday, 9:00 to 18:00, Spanish time).

2. WHAT DATA WE HANDLE

About the business:

• Name, sector, address, phone number and email address. Its public profile shows the name, the address and the phone number, but not the email address.
• For its free website: the texts and photos it sends when signing up (the cover photo, what it does, who they are, the opening hours). They are published on its page once the sign-up is approved; until then, the photos are kept separately, outside the website. Hidden data (such as the location) is removed from the photos.
• NIF or CIF (Spanish tax number). A self-employed person’s NIF is never published. A company’s CIF is checked in the European Commission’s VIES register and is shown partly hidden.
• The consent given when signing up.
• About the check: the method, a note, the date and the person who approved it. We do not keep copies of documents.

About anyone who leaves a review (only for businesses that are KreoWeb customers):

• The first name they write, the stars, the text and the month of the service, which are published.
• Their phone number, only as a fingerprint made with a secret key, which cannot be reversed: without that key, it is impossible to know whose it is. It is used to confirm that they are a real person and that they do not leave more than one review in a year.

About any visitor:

• IP address and technical data in the server logs.

3. WHY, AND ON WHAT LEGAL BASIS (GDPR, Art. 6(1))

• Checking the business and publishing its profile, its seal and its free website: performance of the service (point (b)).
• Publishing a review: your consent when you send and confirm it (point (a)), and compliance with the legal obligation on reviews (point (c)).
• Sending you news and offers from KreoWeb (never from other companies): communications to customers about similar services (Art. 21.2 of the Spanish LSSI). You can say no when you sign up, and unsubscribe in every email.
• Preventing fraud and abuse (fake reviews or sign-ups): legitimate interest (point (f)).

KreoConfianza does not use artificial intelligence.

4. HOW LONG

• The business’s data, and the texts and photos of its free website: while it remains signed up, and for 30 days after it leaves.
• Reviews: while the profile is published; after it is withdrawn, they are deleted after 30 days. Those that nobody confirms, after 24 hours.
• The fingerprint of a reviewer’s phone number: 1 year from their last review.
• Server logs with the IP address: 14 days.

5. WHO ELSE SEES THEM. We do not sell data. Only the providers we need receive it:

• Server provider, in Spain.
• Backup provider, in Spain (the copy that leaves our servers is encrypted and it cannot read it).
• WhatsApp (Meta): confirming reviews.
• Email provider: the emails (access codes and notices). It is a US company: although the emails are sent from the EU, its logs are kept there, with the GDPR safeguards (standard contractual clauses and the EU-US Data Privacy Framework).
• Domain registrar: the domain name.
• European Commission (VIES): checking companies’ CIF.

The business’s profile and the reviews are public. Anyone who asks at soporte@kreoweb.io will receive the list of providers with their names.

6. YOUR RIGHTS. Access, rectification, erasure, objection, restriction and portability, by writing to soporte@kreoweb.io. You can lodge a complaint with the Spanish Data Protection Agency (aepd.es).