1. Data controller
Controller: Danilo Costarella, a natural person resident in Spain. Spanish tax ID (NIF): X1650144D. Address: PRAGE MASOS SANT JULIÁ DE RAMIS 0067, 17481 - Sant Juliá de Ramis, Girona, Spain. Privacy email: info@tiodor.cat.
2. Scope
This policy describes processing on the site in its current showcase mode. Purchases, payments and commercial orders are not active, and no card or bank-account details are collected.
3. Data that may be processed
Contact form: name, email, enquiry type, message, language and, when supplied, company and country.
Launch notices and newsletter: email, language, consent confirmation, subscription source and registration date.
Customer account: email, authentication credentials and technical data required to maintain the session. If Google is used, the necessary identity data supplied by that provider is received.
TIÓCOIN wallet: account identifier, balance and movement history. At the current stage, the wallet is informational and does not allow redemptions.
Browsing and security: IP address, technical logs, session identifiers and operational data that hosting and security providers may process.
4. Purposes
Data is used to answer enquiries; manage requested notices and communications; create and maintain accounts; display the wallet and its movements; protect the site, prevent abuse and ensure operation; and comply with legal obligations.
5. Legal bases
Consent covers notices, the newsletter and responses to requests where applicable. Account and wallet management is based on the relationship requested by the user. Security and technical operation may rely on legitimate interests, and processing required by law relies on compliance with legal obligations.
6. Recipients and providers
Personal data is not sold. Where necessary, providers of hosting, database, authentication, email, security and maintenance services, including Lovable Cloud, may access it. Google is involved in identification only if that sign-in method is chosen. Google Fonts also receives technical connection data to load fonts, independently of sign-in.
Stripe and payment functions remain inactive to the public in showcase mode. This policy must be updated before payments or purchasing are enabled.
7. International transfers
Some technology providers may process data outside the European Economic Area. Where this occurs, safeguards required by data-protection law, such as adequacy decisions or standard contractual clauses, must apply.
8. Retention
Enquiries are kept as long as needed to handle them and address potential liabilities. Notice and newsletter data is kept while the subscription exists or until withdrawal. Account and wallet data is kept while the account remains active and afterwards for legally required periods. Technical logs are retained according to provider policies and security needs.
9. Rights
Where applicable, individuals may request access, rectification, erasure, objection, restriction and portability by writing to info@tiodor.cat. Consent may be withdrawn at any time without affecting the lawfulness of earlier processing.
Proportionate additional information may be requested to verify a request. Individuals may complain to the Spanish Data Protection Agency (https://www.aepd.es) or their competent supervisory authority.
10. Withdrawing from communications
The “Unsubscribe” page only cancels the subscription associated with the verified email of the signed-in account. Without an account, you may request removal by writing to info@tiodor.cat from the subscribed email address itself. Unsubscribing from communications does not delete the account or TIÓCOIN wallet and does not affect data retained for another purpose or legal obligation.
11. Security, minors and automated decisions
Reasonable technical and organisational measures are applied, although no system is completely infallible. Forms and accounts are not intended to knowingly collect data from minors. No automated decisions with legal effects or advertising profiles are made.
12. Changes
Any relevant change to activities, providers or purposes must be reflected in an updated version of this policy before implementation.
11/9/2026