Privacy Policy

1. Controller and scope

Aitor García is the controller for personal data used to operate the Ordesa DSP free beta, manage access and activations, answer support requests and review feedback. Contact: contact@ordesadsp.com.

This notice covers the website and participation in the beta. No purchases are offered on this website during this phase.

2. Data and sources

• Website: IP address, browser, device, requests and technical or security records.
• Accounts and activations: email, account details, product access and licence status, device identifiers and activation IP addresses processed through Moonbase.
• Support and feedback: messages, questionnaire answers, attachments, versions and diagnostics that you provide.

Data comes from you, your browser and the services used for beta access. Required fields are indicated when collected; without necessary information we may be unable to manage access or respond. Feedback beyond required access information is optional. Do not send passwords, payment credentials or unrelated sensitive information.

3. Purposes and legal bases

• Requested beta access and support: manage accounts, downloads, licences, activations and related support on the basis of the beta service you request.
• Legitimate interests: maintain website and licence security, prevent abuse, respond to general enquiries, review voluntarily submitted feedback to improve the beta and handle related claims, where necessary and after balancing your rights.
• Legal obligation: respond to binding legal requests and meet applicable data-protection duties.

Necessary access, activation and security emails are service communications. The beta website does not offer newsletter sign-up. Participation does not itself authorise advertising or publication of identifiable feedback.

4. Providers and transfers

• Cloudflare: website hosting, delivery and network security. Privacy information.
• Moonbase: accounts, downloads, licences and activations. Privacy information.
• Zoho Mail: support and beta correspondence, using a European account region. Privacy information.
• Google Forms: the external form linked from “Join the beta” collects the information you submit for beta participation and feedback. Review its questions before sending. Opening it connects you to Google. Google privacy information.

Providers may use subprocessors. Necessary information may also be disclosed to authorities under legal duties or to advisers for claims. A European account region does not guarantee that all processing stays in the European Economic Area. For information about destinations and applicable transfer safeguards, contact us at the privacy address above.

5. Retention and security

Account and activation records are kept while necessary to manage and verify your beta access. Support messages and diagnostics are kept until the issue is resolved and, where necessary, for related claims. Identifiable feedback is kept while needed to assess and follow up the beta issue; identifying details should be removed when no longer needed. Technical records are retained for the period proportionate to investigating errors or security incidents.

Records required by law or for claims are retained for applicable statutory periods, with restricted access and blocking where required, then erased. Access and security measures must reflect the risks; no absolute online security is promised.

6. Your rights

Where legally applicable, you may request access, rectification, erasure, restriction and portability, object to processing and withdraw consent. You may object to legitimate-interest processing on grounds relating to your particular situation.

Write to contact@ordesadsp.com with enough information to locate your records. Additional identification is requested only if reasonably necessary. Requests are handled within statutory deadlines, with any justified extension communicated as required. Exercise is free except where the law permits a justified exception. For Moonbase’s independent processing, contact privacy@moonbase.sh; this does not prevent you from contacting us about our own use of your data.

You may complain to the Spanish Data Protection Agency or another competent supervisory authority, including where you habitually reside or work.

7. Browser storage and changes

The website loads Moonbase’s module for account access, downloads and activations. The module supports local storage (localStorage) and session storage (sessionStorage); the moonbase_auth local-storage entry maintains sign-in between page loads. It also contains caching, cart and campaign-attribution functions. Removing purchase buttons does not itself disable every function of an external module.

Local storage can persist between visits until removed by the application or browser; session storage generally lasts for the tab’s session. Browser controls let you remove stored information, which may require signing in again. Storage strictly necessary for a service you expressly request may be exempt from consent; other storage or tracking requires consent where applicable. Reading this policy is not consent.

Changes affecting beta data processing will be reflected here and communicated where required. Contact us with privacy questions or to exercise your rights.