Privacy Policy

Applicable law

This notice is given under Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR).

Controller

The controller decides why and how personal data is processed for TerrenoCheck.

What data we process

• data you give us: your email address (required for a paid order, optional with an access code), the language you choose, the note on your purpose if you write one, the confirmations you tick when ordering, any messages you send us and, if you call us, your number and what you tell us, used only to deal with that call;
• parcel data: the cadastral reference, the selected outline, coordinates, the place you searched for and the results returned by public sources;
• order data: the order identifier and status, the test access code used, the files produced and visits to the order page;
• technical data: IP address, browser type, date and time and error logs, kept for security and troubleshooting;
• payment data: Stripe tells us whether the payment went through, with the references needed to match it to the order, but never the full card number.

Why we process it and on what legal basis

• to perform the contract (Article 6(1)(b) GDPR): identify the parcel, handle the order, produce, check and deliver the report and answer your messages;
• to meet legal obligations (Article 6(1)(c)): keep the accounting and payment records the law requires;
• our legitimate interests (Article 6(1)(f)): keep the service secure, prevent abuse and diagnose faults; use our own server-side visit count to understand which pages and ordering steps are used and improve the service.

Optional analytics and advertising, when configured, rely on your consent (Article 6(1)(a) GDPR). Refusing does not prevent a purchase. We do not sell personal data.

Who receives data

• OVH SAS (France) hosts the server, located in the European Union, that runs the application and stores the reports.
• Mapbox supplies the maps and aerial imagery on the site. Your browser downloads the map tiles directly from api.mapbox.com, so Mapbox receives your IP address and the map area you are viewing. Place search and reverse lookup are run by our server: Mapbox then receives only the text you typed or the coordinates, not your IP address.
• The Dirección General del Catastro, MITECO (SNCZI flood maps) and the European Environment Agency (Natura 2000) are queried by our server with the parcel coordinates or cadastral reference only. The report uses IGN / PNOA aerial imagery, IGN terrain data and building outlines from the Catastro and IGN. Mapbox is used for the site's parcel picker and place search. Our server also sends the parcel coordinates to CartoCiudad, the national geocoder run by the Instituto Geográfico Nacional, to write the official name of the municipality and, near the Basque Country or Navarre, to tell whether a foral cadastre applies. For natural hazards and protected areas, our server also sends the area around the parcel to the Instituto Geográfico Nacional (earthquakes), the Instituto Geológico y Minero de España (geology), EFFIS, run by the European Commission's Joint Research Centre under Copernicus (wildfires), the European Environment Agency (protected natural areas) and, in Andalusia, the Junta de Andalucía's REDIAM (wildfires). For the coast, water, noise and transport routes, it also sends the area around the parcel to MITECO (coastal boundaries, groundwater and noise maps), the Ministry of Transport and Sustainable Mobility (roads and railways) and the Instituto Geográfico Nacional (transport network). For farm use, aeronautical easements and the municipal context, it also sends the parcel's location to the Fondo Español de Garantía Agraria (SIGPAC agricultural register), the Ministry of Transport and Sustainable Mobility (aeronautical easements) and MITECO (municipal boundaries and demographic indicators). Drove roads, public woodland and the INE household income are read from files kept on our server, so nothing is sent to those sources. For the land class and mining rights, it also sends the area around the parcel to the Ministry of Housing and Urban Agenda (land classes of the Sistema de Información Urbana) and MITECO (Catastro minero, the mining rights register). These public data services receive neither your email nor your IP address.
• Amazon Web Services EMEA SARL (Amazon Simple Email Service, EU region in Stockholm) sends the order emails from no-reply@terrenocheck.es. It receives your email address, the message and the private link to the report. Replies go to our support mailbox, support@kandyb-studio.eu.
• Stripe Payments Europe Limited handles payment and fraud prevention.
• OpenAI (Codex, USA) and Anthropic (Claude, USA) run the automated quality control: before delivery their language models read the whole PDF of the report. The only purpose is to find errors in data, wording or layout before you receive the report; the legal basis is performance of the contract (Article 6(1)(b) GDPR). They receive only the report, with the cadastral reference, the location and the parcel data, and the internal order number; never your name, email address or payment details. We use these services on their standard subscriptions, and each company handles that content under its own privacy policy.

Transfers outside the EEA

Mapbox, Inc. receives your IP address and the map area in the United States. Mapbox is certified under the EU-U.S. Data Privacy Framework, so the transfer rests on the European Commission's adequacy decision of 10 July 2023 (Article 45 GDPR) and, where that does not apply, on standard contractual clauses (Article 46 GDPR). Stripe Payments Europe Limited, in Ireland, may involve Stripe, Inc. in the United States; Stripe sets out the basis for that transfer in its own privacy policy. The report that OpenAI and Anthropic read for the quality control is processed in the United States (see “Who receives data”). You can ask us for the current details.

How long we keep data

The report, the order page and the order data are kept for 90 days and then deleted automatically, unless accounting law requires a record to be kept longer. Web server logs (IP address, browser, date and time) are deleted after 14 days. The visit count keeps only the shortened network, never the full IP address, and is deleted after 90 days. If a particular record is needed for a security incident or a dispute, only that record is kept, and only while the matter lasts. Data from a phone call is kept while the query is being dealt with. An early erasure request does not override a legal duty to keep a record.

Copies used for the AI quality check

The 90-day period above describes deletion from our server. It does not set the retention period for copies processed in the AI services. Those services apply their own policies: OpenAI privacy policy and Anthropic privacy policy. For questions about the copy of your report used in the quality check or to exercise your rights, write to support@kandyb-studio.eu.

Cookies and browser storage

Essential storage keeps your language, your cookie choice and a one-hour security cookie set only when you open the withdrawal form. Optional services stay blocked until you choose them, and you can change your answer through Cookie preferences in the footer. See the cookies page for details, including the map connection to Mapbox.

Automated processing

The report is produced automatically from parcel data, and before delivery an AI quality control reads it to catch errors in the report; that check concerns the report, not you. We make no decision about you based solely on automated processing that has legal or similarly significant effects within the meaning of Article 22 GDPR.

Your rights

Where the GDPR provides, you may obtain access to your data, have it corrected or erased, restrict its use, receive it in a portable format and object to processing based on legitimate interests. Write to support@kandyb-studio.eu, with the order email and the report reference if you have them. We reply within one month and ask only for what we need to confirm it is you.

You may complain to a supervisory authority. The controller is established in Poland, so the lead authority is the Polish Personal Data Protection Office (UODO). If you live in Spain, you may also complain to the Agencia Española de Protección de Datos (AEPD).

Optional measurement recipient

Google Ireland Limited receives visit data, including your IP address, only for the analytics or advertising purpose you allow. The basis is consent under Article 6(1)(a) GDPR and Article 22.2 LSSI-CE. Google may process data in the United States under the EU-US Data Privacy Framework or standard contractual clauses. Withdraw consent through Cookie preferences in the footer; see the cookies page for the services configured and storage used.

Withdrawal statements

If you use the online withdrawal function, we keep your name, order code, email address and the time of the statement to handle it and to prove that we received it, as the consumer-protection rules require (Article 6(1)(c) GDPR). We keep them as long as a claim about the order can still be made.