Privacy policy

This page explains which personal data we process when you use edeck.me, why, for how long and what your rights are.

1. Data controller

  • Owner: Carlos Gomez
  • Tax ID: 60210417M
  • Address: 08024 Barcelona (Barcelona)
  • Email: info@edeck.me
  • Phone: 693025096

2. What data we process

  • What you give us when you write to us through a form: name, email, phone and your message.
  • Your account and order data, if you sign up or buy: first and last name, email, phone, ID document if required for the invoice, shipping and billing addresses, and the products you bought.
  • Browsing data: what cookies collect, as explained in the cookie policy.

We do not ask for special categories of data (health, beliefs, etc.). If you are under 14, do not give us any data without your parents’ or guardians’ consent.

3. Why we use it and on what legal basis

  • To answer your enquiries, with your consent when you send the form.
  • To manage your account, your orders, shipping and invoicing, because it is necessary to perform the purchase contract.
  • To meet legal obligations, such as tax and accounting ones.
  • To count visits with Umami, edeck.me's analytics, with no cookies and nothing stored on your device. Your IP address and browser are used on the spot to work out your approximate country, region and city and a visitor code that changes every month; the IP address is not stored and that code does not reveal who you are or follow you to other websites. The pages you view, the referring page, the campaign parameters of the address, your browser, operating system, device type, screen size and language are recorded to produce usage statistics for the site. Legal basis: our legitimate interest in knowing how the site is used. You can object by writing to us.

We do not make automated decisions that affect you, nor build profiles for advertising.

4. How long we keep it

For as long as you keep your account or as needed to handle your enquiry or order, and then for the periods required by law (for example, for keeping invoices). After that, it is deleted. Visit statistics are kept for a maximum of 25 months.

5. Who else processes it

We do not sell or pass your data on to third parties, unless required by law. To provide the service we use these providers, which process data only on our behalf and with the safeguards required by law:

  • edeck.me, the platform this website is built with, which hosts it and stores its data on its servers.

6. Your rights

You can ask at any time to access, correct or delete your data, object to or restrict its processing, ask for its portability and withdraw your consent, by writing to info@edeck.me. If you think we have not handled your data properly, you can complain to the data protection authority of your country (in Spain, the Agencia Española de Protección de Datos, www.aepd.es).

7. Security

The website uses an encrypted connection (HTTPS) and we apply technical and organisational measures to protect your data against loss, unauthorised access or misuse.

8. If you create an account to build your website

In addition to the above, edeck.me processes the data of people who sign up to create and manage their site:

  • Your account: name, email and password (stored encrypted; nobody can read it). We use them to give you access to the panel and to send you what is necessary (verifying your email, recovering your password, the status of your subscription). Legal basis: the service contract.
  • The IP address you sign up from: we store it encrypted, together with a fingerprint that does not reveal it, to stop automated sign-ups and sign-ups that use someone else’s email. It is only looked at to investigate abuse and it is deleted after 90 days. Legal basis: our legitimate interest in protecting the service and the people who receive its emails.
  • Your subscription: the plan and its status. Payment is processed by Stripe; your card details go straight to Stripe and edeck.me neither sees nor stores them. Legal basis: the contract and tax obligations.
  • Platform emails are sent through the mail server of IONOS, which acts as a data processor.
  • Your site’s content (texts, images, products) and your own customers’ data are stored by you on edeck.me. For that data, you are the controller and edeck.me is your processor: it only stores and serves it so that your website works.
  • Visits to your site are counted by edeck.me with Umami, hosted on its own servers, with no cookies and nothing stored on the visitor’s device. The IP address and browser are used on the spot to work out the approximate country, region and city and a pseudonymous visitor code that changes every month; the IP address is not stored and that code does not reveal who the visitor is or follow them to other websites. You see the statistics in your panel. It does so on your behalf, as a processor, under section 11 of the publishing rules, and the cookie and privacy policies your site generates explain it to your visitors. For itself, edeck.me only uses aggregated figures per site (for example, total visits), which identify nobody, to run and improve the service. So that your own visits are not counted, while you use the panel your browser keeps a technical cookie, vs_notrack, for one year, and an equivalent mark in the local storage of your own site when you open it from the panel; they contain no personal data and you can delete them whenever you want.

9. The artificial intelligence demo

If, when creating your site, you use the “Your website with AI” step, we send to DeepSeek, an artificial intelligence provider whose servers are in China, the data you type in that form: your business name, the kind of website, what you do, the location if you give it, your products or services if you give them and the tone you choose.

  • Purpose: only to generate the design and the texts of your website demo.
  • Legal basis: your consent, given by using that step. It is optional: you can skip it and build your website step by step without sending anything.
  • What we do not send: your email, your password, payment data, or any data about your website’s visitors or customers.
  • International transfer: as China does not have an adequacy decision from the European Union, the transfer is based on your explicit consent for this specific purpose. Do not type third parties’ personal data in that form.

Last updated: 10/10/2026.