PRIVACY POLICY

Last updated: February 19, 2026

1. Data Controller

In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), the data controller of personal data collected through this website is:

Arnau Blanco Gasch
Email: info@nautiroute.com
Website: www.nautiroute.com

Hereinafter referred to as “NautiRoute” or “the Controller”.

2. Personal Data We Collect

When you use this website or purchase products, we may collect the following personal data:

Identification data
Name and surname

Contact data
Email address

Billing data
Billing address
Country
Tax information if required

Technical data
IP address
Browser type
Device information

Transaction data
Purchased product
Payment confirmation
Order history

We do not store credit card information.

Payments are processed securely through third-party providers such as PayPal and/or Stripe.

3. Purpose of Processing

Your personal data is processed for the following purposes:

To process and deliver digital product purchases
To manage payments and invoices
To provide customer support
To comply with legal and tax obligations
To improve website functionality and user experience

We will not use your data for purposes other than those described above.

4. Legal Basis for Processing

The legal bases for processing your data are:

Performance of a contract (processing your order)
Compliance with legal obligations (tax and accounting regulations)
Legitimate interest (improving website performance and security)
Consent (for cookies or marketing communications, if applicable)

5. Data Retention

Personal data will be retained:

For the duration necessary to fulfill contractual obligations
For the legally required period for tax and accounting purposes
Until the user requests deletion, where applicable

6. Data Sharing

Your personal data may be shared with:

Payment service providers (PayPal, Stripe)
Hosting provider (Hostinger or equivalent)
Accounting or tax advisors, where required
Legal authorities, if required by law

We do not sell or rent your personal data.

7. International Data Transfers

Some service providers (such as PayPal or Stripe) may process data outside the European Economic Area.

Such transfers are carried out in accordance with applicable data protection laws and appropriate safeguards.

8. User Rights

Under GDPR, you have the right to:

Access your personal data
Request rectification of inaccurate data
Request deletion of your data
Request restriction of processing
Object to processing
Request data portability

To exercise your rights, contact us at:

[Your Contact Email]

You also have the right to file a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos – AEPD).

9. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss or misuse.

However, no internet transmission is completely secure, and users acknowledge this inherent risk.

10. Cookies

This website uses cookies to improve user experience and analyze traffic.

For detailed information about the use of cookies, please refer to our Cookie Policy.

11. Changes to This Policy

NautiRoute reserves the right to update this Privacy Policy at any time.

Users are encouraged to review this page periodically.