Privacy Policy
How Blancbook processes personal data, on what legal basis, for how long, and how you can exercise your rights under GDPR and LOPDGDD.
- Effective from
- 2026-07-14
- Version
- 2026-07-14
- Jurisdiction
- global
- Controlling text
- The Spanish version is the controlling legal text.
1. Controller. Blancas IT Professional SL — CIF B16398596 — contact info@blancas-it.com.
2. Categories of data. (a) Account data: email, credentials, language, country; (b) Profile data: public name, technical identifier bb_..., bio, avatar, cover, interests and languages; (c) Content and media: posts, comments, reactions, messages, files; (d) Device and security data: sign-in events, device headers, IP hash; (e) Moderation and reports; (f) Legal acceptances; (g) Where you explicitly authorise it, approximate location, and specific marketplace, event or business data.
3. Purposes and legal bases. (a) Providing the service and performing the contract (Art. 6(1)(b) GDPR); (b) Complying with legal obligations, including the DSA (Art. 6(1)(c)); (c) Legitimate interest in security, fraud prevention and service improvement (Art. 6(1)(f)); (d) Consent for optional processing such as marketing or non-essential personalisation (Art. 6(1)(a)).
4. Retention. Data is kept while the account is active and for reasonable or legally required periods afterwards to answer claims, comply with legal obligations and preserve security.
5. Recipients and processors. Blancbook uses processors for hosting, email delivery and operational analytics. The subprocessor list is published at /legal/subprocessors.
6. International transfers. Where data leaves the EEA, appropriate safeguards apply (for example, standard contractual clauses).
7. Your rights. Access, rectification, erasure, objection, restriction, portability and withdrawal of consent, exercisable from the Privacy Rights Centre or by email to info@blancas-it.com. You can also complain to the Spanish Data Protection Agency (AEPD).
8. Minors. Blancbook applies country-aware age rules. Processing for minors is restricted by default: privacy defaults, no behavioural advertising, no public precise discovery, and fast reporting and escalation channels.
9. Automated decisions and recommendation. Blancbook uses recommendation systems to order content. These systems do not make decisions producing legal or similarly significant effects within the meaning of Art. 22 GDPR.
10. Security. We apply reasonable technical and organisational measures, including encryption in transit and access controls. We do not claim specific certifications or algorithms unless explicitly documented at /legal/security.
11. Changes. Material changes are announced with reasonable notice and, where required, require renewed acceptance.