PRIVACY POLICY

1. Introduction

SLT Innovations SL ("we", "us", "our") operates Sur La Terre (surlaterre.net). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our Service, in compliance with the General Data Protection Regulation (GDPR) and Spanish data protection laws (LOPDGDD).

2. Data Controller

3. Personal Data We Collect

3.1 Data You Provide

• Name and surname (required for registration)
• Email address (required for registration and login)
• Any additional information you voluntarily provide

3.2 Data Collected Automatically

• IP address
• Browser type and version
• Device information
• Pages visited and time spent
• Cookies and similar technologies (see Cookie Policy)

4. Legal Basis for Processing

We process your personal data based on:

• Contractual necessity: To provide the Service and manage your account
• Legitimate interest: To improve our Service and ensure security
• Consent: For marketing communications and non-essential cookies

5. How We Use Your Data

• To create and manage your account
• To provide and maintain the Service
• To send transactional emails (login links, account notifications)
• To improve and personalize your experience
• To analyze usage and improve the Service
• To comply with legal obligations

6. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: Hosting (Vercel), database (Supabase), email (Resend), analytics
• Legal requirements: When required by law or to protect our rights
• Business transfers: In case of merger, acquisition, or sale of assets

7. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, where our service providers operate. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain data for legal compliance purposes for up to 5 years, in accordance with Spanish law.

9. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interest
• Withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at info@sltit.net. We will respond within 30 days.

10. Supervisory Authority

You have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD) at www.aepd.es if you believe your data protection rights have been violated.

11. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

12. Children's Privacy

Our Service is not intended for users under 16 years of age. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us.

13. Contact

For privacy-related inquiries: info@sltit.net