Legal

Privacy and cookies policy

Last updated: 29 October 2026. Courtesy translation; the Spanish version prevails.

1. Data controller

Oscar Linares Cayero (tax ID 46822071M) · Carrer Sant Roc, 5, 08191 Rubí (Barcelona), España · info@guidair.net.

2. What data we process, why and on what legal basis

Account (email, name, user ID): to create and manage your GuidAir account, shared with the app. Basis: performance of a contract.
Purchases (product, amount, order number, payment status): to manage your order, give you your passes, email you, and meet tax and accounting duties. Basis: contract and legal obligation.
Billing details (name or company name, tax ID, address), only if you ask for an invoice: to issue and send it and meet tax and accounting duties. You can save them to your profile or delete them at any time. Basis: contract and legal obligation.
Shipping details (name, phone, address): only to ship the physical pack and notify you. Basis: contract.
Contact form (name, email, message): to reply to you. Basis: your consent and our legitimate interest in answering your enquiry.
Technical security data (server and function logs): to prevent fraud and abuse and keep the service running. Basis: legitimate interest.

We do not make automated decisions or build profiles with your data, and we do not use it for third-party advertising.

3. Who else accesses your data

Google (Firebase): authentication, database and functions for accounts and orders.
Stripe: processes the card payment. Card data is collected by Stripe, not by GuidAir.
Carrier (for example Correos, SEUR or another): receives your name, address and phone to deliver the order.
Hosting and email provider (Banahosting): hosts this site and sends the contact-form emails.

Some of these providers may process data outside the European Economic Area; in that case they rely on appropriate safeguards such as the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework.

4. How long we keep data

Account: while you keep it and, afterwards, as long as needed to handle possible liabilities.
Orders and invoicing: the period required by tax and commercial law (up to 6 years).
Contact messages: as long as needed to answer your enquiry.

5. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to info@guidair.net with your account email. If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es).

6. Cookies and browser storage

This site does not use analytics, advertising or tracking cookies. It only uses strictly necessary technical browser storage: keeping you signed in (Firebase Authentication), remembering your language and the product you were buying and, for administrators, an interface flag. Because it is strictly necessary to provide the service you request, it does not require your consent. When you pay, Stripe uses its own cookies on its payment page, under its own policy.

7. Security

We use encrypted connections (HTTPS) and limit access to order data to authorised staff.

8. Changes

Any change to this policy will be published here with its date.