1. Controller and contact
The controller is SMART MARKETING CONCEPT S.R.L., identified above. For privacy questions or to exercise rights, email contact@evoucher.es. No data protection officer has been appointed because one is not required for the current processing activities.
2. Data we process
- Account: name, email, hashed password, verification, preferences and, if chosen, Google sign-in identifier.
- Contact and newsletter: submitted data, message content, consent, confirmation and unsubscribe records.
- Use and security: IP address, browser/device, URL, referrer, time, searches, clicks, reports and security logs.
- Cookies and preferences: session identifiers, language and evidence of cookie choices.
3. Purposes and legal bases
| Purpose | Basis |
|---|---|
| Create and manage accounts, authentication and requested functions | Performance of the service (GDPR Art. 6(1)(b)) |
| Answer messages and requests | Pre-contractual steps or legitimate interest in responding |
| Security, fraud prevention, diagnostics and aggregate improvement | Legitimate interests (Art. 6(1)(f)), balanced against your rights |
| Newsletter and non-essential cookies | Consent (GDPR Art. 6(1)(a) and LSSI-CE Arts. 21–22) |
| Meet legal duties and defend claims | Legal obligation and legitimate interests |
4. Required data
Fields marked as required are needed for the requested function. Not providing them may prevent account creation or a response. The newsletter and optional cookies are voluntary; rejecting them does not prevent browsing.
5. Recipients and processors
Providers hosting the site or supplying email, security and support may access data only under contract and our instructions. If you consent to Statistics, Google Ireland Limited processes cookie identifiers, device data, visited pages, events and technical data to provide Google Analytics 4. Google may use subprocessors and process data outside the EEA under the EU-US Data Privacy Framework where applicable or Standard Contractual Clauses. When an external link is clicked, the retailer and, where applicable, the affiliate network receive technical data needed to open and attribute the visit under their own policies. We also disclose data where required by a competent authority.
6. International transfers
We prioritise providers in the European Economic Area. If a provider processes data outside the EEA, we use an adequacy decision, Standard Contractual Clauses or another valid GDPR Chapter V safeguard. You may request information about the applicable safeguard.
7. Retention periods
- Account: while active; deleted on request except where restricted retention is legally required.
- Contact requests: up to 24 months after closure, unless a claim is pending.
- Newsletter: until consent is withdrawn; signup/unsubscribe evidence for the period needed to handle legal claims.
- Search logs: 90 days; technical logs: 30 days; Google Analytics event data: 14 months; analytics cookie identifiers: up to 24 months; cookie-choice evidence: up to 12 months.
- Authentication attempts and tokens: until expiry or for the configured short security period.
8. Your rights
You may request access, rectification, erasure, restriction, portability and objection, and withdraw consent without affecting earlier processing. Write from the relevant address and state the right requested; we may ask for proportionate identity verification. We normally respond within one month. You may also complain to the authority where you live; in Spain, the Spanish Data Protection Agency (aepd.es).
9. Children and automated decisions
The service is not specifically directed at children under 14 and we do not knowingly request their data. We do not make solely automated decisions producing legal or similarly significant effects. Recommendations, where offered, are informational.
10. Security and changes
We use proportionate technical and organisational controls, including encryption in transit, access control, hashed passwords, backups and security logs. No system is infallible. We will update this policy when processing or law changes and highlight material changes.
Last updated: 22 August 2026. Version applicable to evoucher.es.