PRIVACY POLICY

1. Data Controller

The data controller responsible for this website is Pablo Cirre Gómez, with registered address at Calle Trajano n8 local B. For any privacy-related inquiries, you may contact us through centraldecomunicacion.es.

2. What Data We Collect

We collect the following categories of personal data:

• Uploaded files: The files you submit for conversion. These are processed automatically and deleted within 60 minutes for guest users or 24 hours for registered users.
• IP addresses: Collected for rate limiting, security, and abuse prevention purposes.
• Google account information: If you sign in with Google OAuth, we receive your name, email address, and profile picture to create and manage your account.
• Usage data: Basic analytics data such as pages visited, conversion types used, and session duration.
• Cookies: Essential session cookies and, if you consent, analytics cookies. See our Cookie Policy for details.

3. How We Process Your Data

All file conversions are processed automatically by our servers. No human accesses or reviews your uploaded files. Files are processed in isolated environments and permanently deleted according to the retention schedule above. We process data on the following legal bases under GDPR:

• Contractual necessity: Processing files you upload is necessary to provide the conversion service.
• Legitimate interest: IP logging for security and abuse prevention.
• Consent: Analytics cookies and non-essential data processing, where applicable.

4. Cookies

We use essential cookies for session management and CSRF protection. These are strictly necessary for the site to function. We may also use analytics cookies (such as Google Analytics) to understand aggregate usage patterns. Non-essential cookies are only placed with your explicit consent. For detailed information, see our Cookie Policy.

5. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR) and applicable Spanish data protection law, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate personal data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to data processing based on legitimate interest.
• Right to restrict processing: Request limitation of how we process your data.
• Right to withdraw consent: Withdraw previously given consent at any time.

To exercise any of these rights, please contact us through centraldecomunicacion.es. You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

6. Data Retention

• Uploaded files: Automatically deleted within 60 minutes (guests) or 24 hours (registered users).
• Account data: Retained until you request account deletion.
• Server logs: Retained for a maximum of 90 days for security and debugging purposes.
• Analytics data: Aggregated and anonymized; raw data retained for up to 26 months.

7. Third-Party Services

We may share data with the following categories of third-party service providers:

• Google OAuth: For authentication when you sign in with your Google account. Subject to Google's Privacy Policy.
• Cloud storage providers: If you import files from Dropbox or Google Drive, those services' own privacy policies apply.
• Payment processor (future): If we introduce paid plans, payments will be handled by Stripe or similar PCI-compliant processors. We will never store your payment card details.
• Analytics: We may use Google Analytics or similar privacy-respecting analytics tools.

We do not sell, rent, or trade your personal data to any third party.

8. International Data Transfers

Your data is primarily processed within the European Union. Where data is transferred outside the EU (for example, to Google's infrastructure), appropriate safeguards such as Standard Contractual Clauses are in place to ensure an adequate level of data protection.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including 256-bit TLS encryption for all data in transit, isolated processing environments for file conversions, and automatic file deletion. However, no method of electronic transmission or storage is 100% secure.

10. GDPR Compliance Statement

KaijuConverter is committed to full compliance with the General Data Protection Regulation (EU) 2016/679 and the Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD). We process personal data lawfully, fairly, and transparently, collecting only what is necessary for the purposes described in this policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

12. Contact

For any privacy-related questions, requests, or complaints, please contact us through centraldecomunicacion.es.