AutonomoPro - Privacy Policy & Spanish Data Protection Compliance

🇪🇸 Compliance with Spanish Data Protection Law

This privacy policy complies with:

LOPD-GDD (Ley Orgánica 3/2018 de Protección de Datos Personales y garantía de los derechos digitales)
GDPR (General Data Protection Regulation - EU 2016/679)
LSSI-CE (Ley 34/2002 de Servicios de la Sociedad de la Información y Comercio Electrónico)
Spanish Constitution (Article 18.4 - Right to data protection)

Jurisdiction: Spanish courts have jurisdiction over any disputes arising from this privacy policy.

🚨 Important Notice - Mandatory Advertising

AutonomoPro is a completely free app supported by advertising revenue.

Advertisements are mandatory and cannot be disabled as they:

Enable us to provide the app completely free of charge
Support ongoing development and feature updates
Cover infrastructure and server costs
Provide customer support and maintenance

By using this app, you agree that advertising is essential for the free service under Spanish consumer protection law.

🔒 Your Privacy Under Spanish Law

AutonomoPro respects your fundamental right to data protection as guaranteed by the Spanish Constitution (Article 18.4) and LOPD-GDD. This privacy policy explains how we collect, use, and protect your personal data while providing a free, ad-supported service in compliance with Spanish and European law.

1. Data Controller Information (Responsable del Tratamiento)

Data Controller: Profundi Web Solutions, S.L.
Tax ID (NIF): B70829387
Address: Carrer Huguet des Far 20, A/420, Santa Ponsa, Balearic Islands, Spain
Data Protection Officer (DPO)/Email: info@profundi.eu
Business Registration: Registered in Spanish Mercantile Registry

Spanish Authority: Agencia Española de Protección de Datos (AEPD)
Website: https://www.aepd.es

2. Data We Collect (Datos que Recopilamos)

2.1 Customer Management Data

Data Type	Purpose	Legal Basis (LOPD-GDD/GDPR)	Retention Period
Customer names, companies	Customer relationship management	Art. 6.1.b LOPD-GDD + GDPR Art. 6(1)(b)	Until deletion by user
Phone numbers, email addresses	Communication with customers	Art. 6.1.b LOPD-GDD + GDPR Art. 6(1)(b)	Until deletion by user
Time tracking entries	Work time documentation	Art. 6.1.f LOPD-GDD + GDPR Art. 6(1)(f)	7 years (Spanish tax law requirement)

2.2 Call Duration Data (NO AUDIO RECORDING)

✅ What we track (under Spanish telecommunications law):

Call duration (time in minutes/seconds)
Phone numbers (for customer assignment)
Call type (incoming/outgoing)
Date and time of calls

❌ What we DO NOT track (prohibited under Spanish law):

NO audio recording (requires explicit consent under Spanish law)
NO conversation content
NO voice analysis
NO microphone access for recording

Legal Basis: Art. 6.1.f LOPD-GDD - Legitimate interests (time tracking for billing purposes under Spanish business law)

2.3 Device & Usage Data

Device type and operating system version
App usage statistics (crash reports, performance metrics)
IP address (temporary, for technical purposes only)

Legal Basis: Art. 6.1.f LOPD-GDD + GDPR Art. 6(1)(f) - Legitimate interests

2.4 Advertising Data (AdMob Integration - MANDATORY under Spanish Law)

🚨 Mandatory Advertising Data Processing (Spanish Consumer Law Compliance)

Under Spanish consumer protection law, we clearly inform you that this app is financed through advertising. The following data is processed by Google AdMob:

Advertising ID (IDFA/GAID - resettable in device settings)
Device information (model, OS version, screen size)
App usage data for ad personalization and optimization
General location data (Spain/Balearic Islands level, if permitted)
Ad interaction data (clicks, views, conversions)

Spanish Law Compliance: This data processing is necessary for the legitimate interest of financing the free service, as permitted under Art. 6.1.f LOPD-GDD and Spanish commercial law.

Legal Basis: Art. 6.1.f LOPD-GDD - Legitimate interests (financing free app through advertising under Spanish commercial law)

3. How We Use Your Data (Cómo Usamos Sus Datos)

Core App Functionality: Customer management, time tracking, meeting scheduling
Business Operations: Invoice generation, work time documentation (Spanish tax compliance)
App Improvement: Analytics to improve user experience and fix bugs
Legal Compliance: Spanish tax requirements (Hacienda), business record keeping
Advertising (Mandatory): Display relevant advertisements to support free app usage
Revenue Generation: Ad revenue enables us to provide the app free under Spanish commercial law

4. Data Storage & Security (Almacenamiento y Seguridad)

🔒 Local Data Storage (Spanish Data Sovereignty)

All your personal and business data is stored locally on your device in Spain. We do not transmit your customer data, time entries, or call durations to external servers, ensuring compliance with Spanish data sovereignty requirements.

4.1 Data Location (Ubicación de Datos)

Customer Data: Stored locally on your device in Spain
Call Durations: Stored locally in device's secure keychain in Spain
Analytics Data: Processed by Google Analytics (EU servers, including Spain)
Ad Data: Processed by Google AdMob (global servers with EU adequacy decisions)

4.2 Security Measures (Spanish Cybersecurity Standards)

AES-256 encryption for sensitive data (Spanish cybersecurity standards)
iOS Keychain / Android Keystore integration
No business data transmission without explicit user action
Regular security updates and patches
Secure HTTPS connections for ad serving
Compliance with Spanish National Cybersecurity Strategy

5. Third-Party Services (Servicios de Terceros)

5.1 Google AdMob (Mandatory for Free Usage - Spanish Law Disclosure)

Purpose: Display advertisements to enable free app usage (Spanish commercial law compliance)
Data Processed: Advertising ID, device info, app usage, location (Spain/Balearic Islands)
Privacy Policy: https://policies.google.com/privacy
Google Spain: Google Spain, S.L., Paseo de la Castellana 163, 28046 Madrid
Spanish Tax ID: A-84275120
Opt-out: Limited to device-level advertising settings (Spanish consumer rights)

Note: AdMob integration cannot be disabled as it is essential for providing the free service under Spanish commercial law.

5.2 Google Analytics (Optional - Spanish Analytics Compliance)

Purpose: App usage analytics and crash reporting
Spanish Compliance: Anonymized data processing in accordance with AEPD guidelines
Opt-out: Available in app settings (Spanish user rights)

5.3 Meeting Services (User-Initiated - Spanish Business Law)

When you create meetings under Spanish business practices, data may be shared with:

Google Meet: Meeting details for calendar integration
Zoom: Meeting details for scheduling

Sharing occurs only when you explicitly create meetings, in compliance with Spanish business communication law.

6. Your Rights Under Spanish Law (Sus Derechos bajo la Ley Española)

                Rights under LOPD-GDD and Spanish Constitution:
                Right of Access (Derecho de Acceso): Art. 15 LOPD-GDD - Request information about your personal data
Right to Rectification (Derecho de Rectificación): Art. 16 LOPD-GDD - Correct inaccurate personal data
Right to Erasure (Derecho al Olvido): Art. 17 LOPD-GDD - Request deletion of your personal data
Right to Restrict Processing (Derecho a la Limitación): Art. 18 LOPD-GDD - Limit how we use your data
Right to Data Portability (Derecho a la Portabilidad): Art. 20 LOPD-GDD - Export your data
Right to Object (Derecho de Oposición): Art. 21 LOPD-GDD - Object to processing
Rights related to Automated Decision Making: Art. 22 LOPD-GDD

            

🇪🇸 Additional Rights under Spanish Law

Right to Digital Disconnection: Art. 88 LOPD-GDD
Rights of Minors: Art. 84 LOPD-GDD (enhanced protection)
Right to Digital Legacy: Art. 96 LOPD-GDD
Consumer Protection Rights: Spanish Consumer Code

⚠️ Limitations for Advertising Data (Spanish Commercial Law)

Under Spanish commercial and consumer protection law, you cannot opt-out of advertising data processing for free services. However, you can:

Reset your Advertising ID in device settings
Limit ad tracking in device privacy settings
Contact the Spanish Data Protection Authority (AEPD)
File a complaint with Spanish consumer protection authorities

How to Exercise Your Rights: Contact us at privacy@profundi.com or file a complaint with AEPD (Spanish Data Protection Authority).

7. Data Retention (Conservación de Datos)

Customer Data: Until you delete it or uninstall the app
Time Tracking: 6 years (Spanish tax law requirement - Ley General Tributaria)
Call Durations: Until you delete them (stored locally only)
Analytics Data: 26 months (Google Analytics standard, AEPD approved)
Ad Data: As per Google AdMob policy (typically 9 months, AEPD compliant)
Revenue Data: 6 years (Spanish tax law requirement)
Invoicing Data: 6 years (Spanish commercial law requirement)

8. Children's Privacy (Privacidad de Menores)

Under Spanish law (Art. 84 LOPD-GDD), AutonomoPro is intended for business use and is not directed at children under 14 years of age (Spanish age of digital consent). We do not knowingly collect personal information from children under 14. Enhanced protection applies to minors aged 14-18 under Spanish law.

9. International Data Transfers (Transferencias Internacionales)

Your personal data may be transferred to countries outside Spain and the EU, with adequate protection:

Google Services (US): Protected by EU-US adequacy decisions and Spanish data transfer agreements
AdMob (US): Google Privacy Shield certified and LOPD-GDD compliant
Analytics (US): Covered by Google's data transfer mechanisms approved by AEPD

All transfers comply with Spanish data protection law and AEPD guidelines.

10. Spanish Tax and Business Compliance

💰 Spanish Business Model Compliance

Under Spanish commercial law and tax regulations:

Tax Registration: Registered with Spanish Tax Authority (Hacienda)
VAT Compliance: Spanish VAT (IVA) applied where required
Revenue Declaration: Ad revenue declared to Spanish authorities
Business Registry: Registered in Spanish Mercantile Registry
Consumer Protection: Compliant with Spanish consumer protection laws

Spanish Revenue Distribution: ~70% supports development and Spanish operations; ~30% goes to Google Spain S.L.

11. Contact & Complaints (Contacto y Reclamaciones)

Data Protection Questions (Consultas de Protección de Datos):

Email: info@profundi.eu
Response Time: Within 1 month as required by Spanish law
Subject Line: "LOPD-GDD Request - AutonomoPro"
Language: Spanish, English, Catalan accepted

Spanish Supervisory Authority (Autoridad de Control):

Agencia Española de Protección de Datos (AEPD)
Address: C/ Jorge Juan, 6, 28001 Madrid, Spain
Website: https://www.aepd.es
Phone: +34 901 100 099
Email: consultas@aepd.es

Balearic Islands Data Protection:

Consell Insular de Mallorca - Data Protection
Address: Palma, Mallorca, Balearic Islands
Website: https://www.conselldemallorca.net

Consumer Protection (Protección del Consumidor):

OMIC (Oficina Municipal de Información al Consumidor) - Palma
Phone: +34 971 225 900
Address: Palma de Mallorca, Balearic Islands

12. Applicable Law and Jurisdiction (Ley Aplicable y Jurisdicción)

🇪🇸 Spanish Law Governs This Privacy Policy

Applicable Law: This privacy policy is governed by Spanish law, specifically:

LOPD-GDD (Ley Orgánica 3/2018)
Spanish Civil Code (Código Civil Español)
Spanish Consumer Protection Law (Ley de Consumidores)
LSSI-CE (Ley de Servicios de la Sociedad de la Información)

Jurisdiction: Spanish courts, specifically the courts of Palma de Mallorca, Balearic Islands, have exclusive jurisdiction over any disputes arising from this privacy policy.

Alternative Dispute Resolution: You may also use the EU Online Dispute Resolution platform: https://ec.europa.eu/consumers/odr

13. Legal Basis Summary (Resumen Base Legal)

Processing Activity	Spanish Legal Basis	Can Opt-Out?
Core app functionality	Art. 6.1.b LOPD-GDD - Contract performance	No (essential)
Advertising (AdMob)	Art. 6.1.f LOPD-GDD - Legitimate interests	No (mandatory for free service)
Analytics	Art. 6.1.a LOPD-GDD - Consent	Yes (in app settings)
Call duration tracking	Art. 6.1.a LOPD-GDD - Consent	Yes (can be disabled)

Last Updated: January 2025
Version: 2.0 (Spanish Law Compliance)
Effective Date: Upon app installation
Next Review: January 2026
Spanish Registration: [Your Spanish Business Registration Number]

This document was printed on:

Printed in: Palma, Balearic Islands, Spain

🚨 Important Notice - Mandatory Advertising

AutonomoPro is a completely free app supported by advertising revenue.

Advertisements are mandatory and cannot be disabled as they:

Enable us to provide the app completely free of charge
Support ongoing development and feature updates
Cover infrastructure and server costs
Provide customer support and maintenance

By using this app, you agree that advertising is essential for the free service.

🔒 Your Privacy Matters

AutonomoPro is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR). This privacy policy explains how we collect, use, and protect your personal data while providing a free, ad-supported service.

1. Controller Information

Data Controller: Profundi GmbH
Address: [Your Company Address]
Email: privacy@profundi.com
Phone: [Your Phone Number]
Data Protection Officer: dpo@profundi.com

2. Data We Collect

2.1 Customer Management Data

Data Type	Purpose	Legal Basis (GDPR)	Retention Period
Customer names, companies	Customer relationship management	Art. 6(1)(b) - Contract performance	Until deletion by user
Phone numbers, email addresses	Communication with customers	Art. 6(1)(b) - Contract performance	Until deletion by user
Time tracking entries	Work time documentation	Art. 6(1)(f) - Legitimate interests	7 years (legal requirement)

2.2 Call Duration Data (NO AUDIO RECORDING)

✅ What we track:

Call duration (time in minutes/seconds)
Phone numbers (for customer assignment)
Call type (incoming/outgoing)
Date and time of calls

❌ What we DO NOT track:

NO audio recording
NO conversation content
NO voice analysis
NO microphone access for recording

Legal Basis: Art. 6(1)(f) GDPR - Legitimate interests (time tracking for billing purposes)

2.3 Device & Usage Data

Device type and operating system version
App usage statistics (crash reports, performance metrics)
IP address (temporary, for technical purposes only)

Legal Basis: Art. 6(1)(f) GDPR - Legitimate interests (app improvement and technical support)

2.4 Advertising Data (AdMob Integration - MANDATORY)

🚨 Mandatory Advertising Data Processing

To keep this app completely free, we use Google AdMob for advertising. The following data is processed:

Advertising ID (resettable in device settings)
Device information (model, OS version, screen size)
App usage data for ad personalization and optimization
General location data (country/region level, if permitted)
Ad interaction data (clicks, views, conversions)

Note: This data processing is mandatory for app usage and cannot be opted out of, as advertising revenue is essential for providing the free service.

Legal Basis: Art. 6(1)(f) GDPR - Legitimate interests (financing free app through advertising)

3. How We Use Your Data

Core App Functionality: Customer management, time tracking, meeting scheduling
Business Operations: Invoice generation, work time documentation
App Improvement: Analytics to improve user experience and fix bugs
Legal Compliance: Tax requirements, business record keeping
Advertising (Mandatory): Display relevant advertisements to support free app usage
Revenue Generation: Ad revenue enables us to provide the app free of charge

4. Data Storage & Security

🔒 Local Data Storage

All your personal and business data is stored locally on your device only. We do not transmit your customer data, time entries, or call durations to external servers.

4.1 Data Location

Customer Data: Stored locally in app's secure storage
Call Durations: Stored locally in device's secure keychain
Analytics Data: Processed by Google Analytics (EU servers)
Ad Data: Processed by Google AdMob (global servers with EU adequacy)

4.2 Security Measures

AES-256 encryption for sensitive data
iOS Keychain / Android Keystore integration
No business data transmission without explicit user action
Regular security updates and patches
Secure HTTPS connections for ad serving

5. Third-Party Services (Mandatory)

5.1 Google AdMob (Mandatory for Free Usage)

Purpose: Display advertisements to enable free app usage
Data Processed: Advertising ID, device info, app usage, location (general)
Privacy Policy: https://policies.google.com/privacy
Opt-out: Limited to device-level advertising settings only
Revenue Share: Google keeps approximately 30% of ad revenue, we receive 70%

Note: AdMob integration cannot be disabled as it is essential for providing the free service.

5.2 Google Analytics (Optional)

Purpose: App usage analytics and crash reporting
Data Processed: Anonymous usage statistics
Opt-out: Available in app settings

5.3 Meeting Services (User-Initiated)

When you create meetings, data may be shared with:

Google Meet: Meeting details for calendar integration
Zoom: Meeting details for scheduling

Sharing occurs only when you explicitly create meetings and send invitations.

6. Your Rights Under GDPR

                You have the following rights:
                Right of Access (Art. 15): Request information about your personal data
Right to Rectification (Art. 16): Correct inaccurate personal data
Right to Erasure (Art. 17): Request deletion of your personal data
Right to Restrict Processing (Art. 18): Limit how we use your data
Right to Data Portability (Art. 20): Export your data in machine-readable format
Right to Object (Art. 21): Object to processing based on legitimate interests
Right to Withdraw Consent (Art. 7): Withdraw consent for optional features

            

⚠️ Limitations for Advertising Data

Please note that you cannot opt-out of advertising data processing as it is essential for the free app model. However, you can:

Reset your Advertising ID in device settings
Limit ad tracking in device privacy settings
Contact us for specific data protection requests

How to Exercise Your Rights: Contact us at privacy@profundi.com or use the in-app data management features.

7. Data Retention

Customer Data: Until you delete it or uninstall the app
Time Tracking: 7 years (legal requirement for business records)
Call Durations: Until you delete them (stored locally only)
Analytics Data: 26 months (Google Analytics standard)
Ad Data: As per Google AdMob policy (typically 9 months for personalization)
Revenue Data: 7 years (legal requirement for tax purposes)

8. Children's Privacy

AutonomoPro is intended for business use and is not directed at children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

9. International Data Transfers

Your personal data may be transferred to and processed in countries outside the EEA, specifically:

Google Services (US): Protected by adequacy decisions and standard contractual clauses
AdMob (US): Google Privacy Shield certified and GDPR compliant
Analytics (US): Covered by Google's data transfer mechanisms

All transfers comply with GDPR requirements and provide adequate protection.

10. Free App Business Model

💰 How AutonomoPro Stays Free

We believe professional business tools should be accessible to everyone, regardless of budget. Here's how we make this possible:

Advertising Revenue: 100% of our income comes from ads
No Hidden Costs: No premium features, subscriptions, or in-app purchases
Volume Economics: Many users viewing ads = sustainable free service
Google Partnership: Reliable ad delivery through AdMob platform

Revenue Distribution: ~70% supports development, infrastructure, and support; ~30% goes to Google for ad platform services.

11. Contact & Complaints

Data Protection Questions:

Email: privacy@profundi.com
Response Time: Within 30 days as required by GDPR
Subject Line: "GDPR Request - AutonomoPro"

Business Inquiries:

Email: support@profundi.com
For: Technical support, feature requests, partnership inquiries

Supervisory Authority:

You have the right to lodge a complaint with your local data protection authority. For Germany:

Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)
Website: https://www.bfdi.bund.de
Email: poststelle@bfdi.bund.de

12. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. We will:

Notify users of significant changes through the app
Post the updated policy with a new "Last Updated" date
Require renewed consent for material changes affecting data processing
Maintain previous versions for reference

Continued use of the app after changes constitutes acceptance of the updated policy.

13. Legal Basis Summary

Processing Activity	Legal Basis	Can Opt-Out?
Core app functionality	Art. 6(1)(b) - Contract performance	No (essential)
Advertising (AdMob)	Art. 6(1)(f) - Legitimate interests	No (mandatory for free service)
Analytics	Art. 6(1)(a) - Consent	Yes (in app settings)
Call duration tracking	Art. 6(1)(a) - Consent	Yes (can be disabled)

Last Updated: January 2025
Version: 2.0 (Mandatory Advertising Model)
Effective Date: Upon app installation
Next Review: January 2026

This document was printed on: