Effective Date: February 18, 2025
Compliance with Applicable Laws and Regulations
In compliance with applicable data protection laws and regulations in Spain, and with our commitment to protecting our users in the European Union, ERNEST DIFT MANAGEMENT SL (hereinafter, "Debook") also adheres to the provisions of the European Union's General Data Protection Regulation (GDPR) and Spain's Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights, concerning users located in the European Union.
Identity of the Data Controller
The company responsible for processing personal data collected through the Debook mobile application is ERNEST DIFT MANAGEMENT SL, a company duly established and operating under the laws of Spain, with its registered office at Sant Andreu de la Barca, 08740, Barcelona, Spain, CIF B67058313.
For any questions or inquiries about this Privacy Policy or the processing of personal data in Debook, users can contact the data controller via email at support@debook.app.
Purpose of Data Processing
User Registration on the Debook App: Personal data provided during registration are necessary for creating a user account and accessing the services offered by Debook.
Providing Personalized Services and Enhancing User Experience: The personal data collected may be used to improve user experience and personalize the services offered within the app.
Sending Promotional Emails About Debook's Services: With the user's consent, Debook may use the collected personal data to send promotional emails about the services offered.
Types of Personal Data Collected
Full Name: For account identification and service personalization.
Date of Birth: To comply with regulations and tailor services based on the user's age. Additionally, to ensure all users are of legal age.
Country of Residence: To comply with regulations and determine the services and products available to users based on their country.
Email Address: For account identification and to send information related to the app and the services offered.
Phone Number: To enable direct communication with users for login, signup, account security, notifications, and customer support.
Multimedia (Photos, Videos, and Audio): If required for certain services, multimedia data may be collected to enhance user engagement and for identity verification processes.
IP Address: For fraud prevention and detection and to enhance app security.
App Usage and Access Information: To improve user experience and personalize the services offered.Affidavit: Debook may require users to provide an affidavit to comply with regulations and to verify the user's identity and financial information.
Legal Basis for Processing
The processing of personal data collected through the Debook app is based on the user's explicit consent. By using the Debook app and providing personal data, the user consents to the processing of their data in accordance with this Privacy Policy.
Consent must be freely given, specific, informed, and unambiguous. This means the user must be clearly informed about the purposes of processing their personal data and any other relevant information before giving consent.
If the user withdraws their consent at any time, Debook will cease processing the user's personal data, provided there is no other legal basis justifying the processing, such as compliance with a legal or contractual obligation.
Data Recipients
Debook commits not to share personal data collected through the mobile application with third parties, except in cases expressly provided in this Privacy Policy or when there is a legal obligation to do so. However, Debook may use third-party services that comply with data protection standards and are duly authorized by Debook for the management and maintenance of the mobile application. These may include:
Mobile Hosting Service Providers: To store the collected personal data.
Mobile Analytics Service Providers: To enhance user experience and personalize the services offered within the mobile application.
International Data Transfers
Debook ensures that any data transfer outside Spain’s territory is carried out in compliance with international standards and the European Union's data protection laws.
In the event of an international data transfer, Debook will inform the user and obtain their prior consent when necessary, in accordance with applicable regulations.
User Rights
Users who have provided their personal data through the Debook mobile application have the right to exercise the following rights:
Access: Obtain information about the personal data Debook has collected about them and how it is being processed.
Rectification: Request the correction of inaccurate or incomplete personal data.
Erasure: Request the deletion of personal data when it is no longer necessary for the purposes for which it was collected.
Restriction: Request the limitation of processing their personal data under certain circumstances.
Data Portability: Receive personal data in a structured, commonly used, and machine-readable format, and transmit it to another entity.
Objection: Object to the processing of their personal data under certain circumstances, such as when processing is carried out for direct marketing purposes.
To exercise these rights, users can send an email to support@debook.app. Debook will respond to the request within a maximum period of one month from its receipt.
Security Measures
Debook has adopted technical and organizational security measures to ensure the protection of personal data, including:
Use of secure connections (HTTPS).
Data encryption.
Implementation of firewalls and intrusion detection systems.
Regular data backups.
Periodic audits and assessments to ensure compliance with data protection standards.
In the event of a security breach affecting personal data, Debook will inform the affected user and competent authorities within 72 hours of becoming aware of the breach.
Transparency in Artificial Intelligence Algorithms
Debook uses Artificial Intelligence (AI) algorithms to offer customised creation of lines, personalized recommendations, and improve overall user experience within the mobile application. These algorithms process data anonymously and always in full compliance with current data protection regulations. We are committed to maintaining a high level of transparency in the use of AI and to conducting periodic audits to ensure the ethics and fairness of our algorithms.
Blockchain Implications
Our mobile application may utilize blockchain technology, which has unique features that could have implications for privacy, such as the irreversibility of transactions and a level of transparency different from conventional platforms. It is crucial that users understand these particularities before interacting with our app.
Sensitive Data
Debook refrains from collecting sensitive data such as financial information, biometric data, sexual orientation, or religious beliefs unless absolutely necessary for the provision of our services. In such cases, explicit user consent will be obtained, and additional security measures will be implemented to protect this data.
Data Retention
Personal data will be retained for the time necessary to fulfill the purposes described in this Privacy Policy. Criteria used to determine retention periods include legal, regulatory, and contractual obligations, as well as the duration of our relationship with you. Once data is no longer needed, it will be securely deleted.
Data Protection Officer (DPO) Contact Information
For any questions related to data protection, you can contact our Data Protection Officer (DPO) by sending an email to support@debook.app.
Impact of Not Providing Data
Failure to provide certain personal data may result in the inability to access some of our services or a less personalized user experience within the mobile application.
Handling of Minors
Our mobile application is not designed for individuals under 18 years of age. We do not knowingly collect information from minors and will take steps to delete such information if we become aware of its existence.
Additional Rights by Jurisdiction
You may have additional data protection rights depending on your local jurisdiction. We are committed to complying with all applicable laws and regulations.
Dispute Resolution Mechanisms
For disputes related to data privacy, we offer a resolution mechanism through an impartial third party, in addition to the option of filing a complaint with relevant data protection authorities.
Impact of Changes to the Privacy Policy
If we make significant changes to this Privacy Policy, we will notify you by posting a notice within our mobile application and/or via the email you have provided. Changes may also affect how we handle data collected previously, and in such cases, we will obtain additional user consent if necessary.
Third-Party Information
We use third-party services for various functions, such as data analysis and hosting for our mobile application. These third parties are subject to their own privacy policies, and while we strive to partner only with entities that respect privacy, we are not responsible for their practices.
Actions in Case of Data Breach
In the unlikely event of a data security breach, we commit to informing affected users and competent regulatory authorities within 72 hours of becoming aware of the breach, in accordance with applicable laws and regulations.
Withdrawal of Consent
Users have the right to withdraw their consent for data processing at any time. Withdrawal of consent can be done by sending an email to support@debook.app or through a specific user interface within our mobile application, if available. Please note that withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
Reviews and Updates
Debook reserves the right to review and update this Privacy Policy periodically to reflect changes in our information collection and usage practices, changes in applicable laws and regulations, and other factors. Updates will be posted within our mobile application and, when significant, will be notified to users via the provided email.
By using the Debook mobile application on iOS or Android, you acknowledge that you have read and understood this Privacy Policy and agree to be bound by its terms and conditions.