Privacy Policy
Last updated: February 2026
1. Data Controller
Plan Zeta Tech SL is the data controller responsible for your personal data.
- Company: Plan Zeta Tech SL
- CIF: B72322886
- Address: Av. Ingeniero Jose Luis Prats, 41703 Dos Hermanas, Spain
- Contact: jmacias@qashops.com
2. Data We Collect
2.1 Data you provide
- Account information: Name, email address when you register or are invited
- Organization data: Company name, department names, email domains
- Platform data: Service requests, assets, comments, and other content you create
- Contact information: Email address when you contact us
2.2 Data collected automatically
- Technical data: IP address, browser type, device information
- Usage data: Pages visited, time spent, referral source
3. How We Use Your Data
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Providing the platform and managing your account | Contract performance |
| Sending service notifications and alerts | Contract performance |
| Responding to your inquiries | Legitimate interest |
| Improving our website and platform | Legitimate interest |
| Complying with legal obligations | Legal obligation |
4. Data Sharing
We share your data only with:
- Hosting providers: Server infrastructure and technical operation only
- Email service providers: Transactional email delivery (e.g., login links, notifications)
We do NOT sell your personal data to third parties.
5. International Transfers
Your data may be transferred outside the EEA only where appropriate safeguards are in place (e.g., Standard Contractual Clauses, adequacy decisions).
6. Data Retention
- Account data: Retained while your account is active, deleted upon request
- Platform data: Retained while your organization's account is active
- Contact inquiries: 2 years after last contact
- Technical logs: 90 days
- Legal/tax records: 6 years (Spanish tax law requirement)
7. Your Rights (GDPR)
Under the General Data Protection Regulation, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Limit how we process your data
- Portability: Receive your data in a portable format
- Object: Object to processing based on legitimate interests
- Withdraw consent: Where processing is based on consent
To exercise these rights, contact us at: jmacias@qashops.com
We will respond within 30 days.
8. Cookies
Our website uses essential cookies for basic functionality (authentication, session management). We do not use tracking or advertising cookies without your consent.
For analytics, we use privacy-friendly solutions that do not require cookie consent under GDPR.
9. Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- HTTPS encryption
- Password hashing and secure authentication (magic links)
- Role-based access control
- Limited access to personal data
10. Children's Privacy
Our platform is not directed at children under 16. We do not knowingly collect data from children.
11. Complaints
If you believe we have violated your data protection rights, you may lodge a complaint with the Spanish Data Protection Authority (AEPD):
- Website: https://www.aepd.es
- Address: C/ Jorge Juan, 6, 28001 Madrid, Spain
12. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated revision date.
13. Contact
For privacy-related questions:
- Email: jmacias@qashops.com
- Address: Av. Ingeniero Jose Luis Prats, 41703 Dos Hermanas, Spain