WEBTACO PRIVACY POLICY
Last updated: September 23, 2026
1. Identification of the Data Controller
In accordance with applicable personal data protection legislation, users are informed that the entity responsible for processing their personal data is:
Legal name: Ramón Simarro S.L.
Trading name: WebTaco
Tax identification number (CIF): B-84170463
Registered address: Calle Reyes Católicos 1, B5P2BD, 28660 Boadilla del Monte, Madrid, Spain.
Email: info@webtaco.net
Website: https://webtaco.net
This Privacy Policy explains how WebTaco collects, uses, stores, discloses, and protects the personal data of users and customers who visit its website or purchase its services.
2. Personal Data We Collect
WebTaco may collect and process the following categories of personal data:
Identification and contact information:
First name, last name, email address, telephone number, trading name, and customer company details.
Billing information:
Name or legal business name, billing address, tax identification number, and other information required to issue invoices.
Information related to purchased services:
Information provided by customers to create their websites, business names, descriptions of their activities, contact details they wish to publish, content, images, logos, and other files necessary to provide the service.
Transaction information:
Purchase amount, date, transaction identifier, payment status, and information required to manage the order and its invoicing.
Technical information:
IP address, browser information, device details, and technical access logs, where collected by WebTaco's systems.
WebTaco does not directly request or store complete payment card numbers or card security codes. Payments are processed through Stripe.
3. Purposes of Data Processing
Personal data is used for the following purposes:
Managing information requests and responding to user enquiries.
Processing orders and managing the purchase of services.
Creating, preparing, and delivering websites purchased by customers.
Processing payments and managing invoices.
Sending communications related to purchases, file delivery, and purchased services.
Providing technical support and customer assistance.
Managing incidents, complaints, and refund requests.
Ensuring system security and preventing fraudulent transactions.
Complying with applicable legal, tax, and accounting obligations.
WebTaco will not use personal data to send unsolicited marketing communications without an appropriate legal basis.
4. Legal Basis for Processing
Depending on the circumstances, personal data is processed on the following legal grounds:
Performance of a contract: To manage purchases, process orders, and deliver purchased services.
Compliance with legal obligations: To meet applicable tax, accounting, and administrative requirements.
Legitimate interests: To protect systems, prevent fraud, and manage necessary customer communications, provided that these interests are not overridden by the rights and freedoms of the individuals concerned.
Consent: For processing activities that legally require the user's prior authorisation.
Where processing is based on consent, users may withdraw it at any time.
5. Payment Processing Through Stripe
WebTaco uses Stripe as an external payment service provider to process payments made through its website.
When a customer makes a purchase, the information required to complete the transaction is transmitted to Stripe through its payment systems.
Stripe may process information relating to the payment method holder, transaction details, IP addresses, and other information necessary to authenticate transactions, prevent fraud, and comply with legal obligations.
WebTaco receives the information necessary to confirm the payment result, identify the order, and deliver the purchased service.
Communication between Stripe and WebTaco's systems may take place through encrypted connections and automated notifications, such as webhooks, which allow transaction status to be confirmed.
Stripe may act as a data processor or an independent data controller, depending on the processing activity.
For further information about Stripe's processing of personal data, please consult its Privacy Policy:
6. Recipients of Personal Data
WebTaco may disclose personal data or allow access to it only where necessary to provide its services, manage business operations, or comply with legal obligations.
Potential recipients include:
Stripe and financial institutions:
To process payments, confirm transactions, manage refunds, and prevent fraudulent activities.
Server hosting and maintenance provider:
WebTaco's website and systems are hosted on a server owned or managed by its technical service provider. Authorised individuals responsible for administering or maintaining these systems may access the information strictly necessary to perform their duties.
WebTaco email service:
To send purchase confirmations, order-related communications, delivery files, and responses to customer enquiries.
Tax, accounting, and administrative advisers:
Where necessary to comply with the company's legal obligations.
Public authorities and competent bodies:
Where disclosure is required by applicable law.
Service providers acting as data processors must be subject to the corresponding legal and contractual obligations.
WebTaco does not sell its customers' personal data to third parties.
7. Methods of Data Disclosure and Transmission
Personal data may be transmitted through the following procedures:
Website forms:
Information entered by users in contact or purchase forms is transmitted to WebTaco's systems to manage their requests.
Payment gateway:
Information required to complete a transaction is transmitted to Stripe through its payment systems.
Automated communications:
Stripe may send electronic notifications to WebTaco's server to confirm transaction results and enable order processing.
Email:
WebTaco uses its email service to send confirmations, purchase-related information, delivery files, and customer support communications.
Authorised technical access:
Personnel or technical service providers responsible for server administration may access information necessary for maintenance, security, or troubleshooting.
Legally required disclosures:
Data may be disclosed to public bodies and competent authorities where required by applicable legislation.
WebTaco will limit data disclosure to the information necessary for each purpose and apply appropriate protective measures.
8. International Data Transfers
Some service providers, including Stripe, may process personal information outside the European Economic Area.
Where international data transfers occur, WebTaco will apply the safeguards required by applicable legislation, as appropriate, including European Commission adequacy decisions or standard contractual clauses, together with any additional safeguards that may be necessary.
Users may request information about applicable international data transfers by contacting info@webtaco.net.
9. Data Retention
Personal data will be retained for as long as necessary to fulfil the purposes for which it was collected.
Information relating to contracts and invoicing will be retained for the periods required by applicable law.
Information provided for website creation will be retained for the period necessary to provide the purchased service and fulfil the corresponding contractual obligations.
Communications and enquiries will be retained for the time necessary to manage them and, where applicable, address potential legal liabilities.
Once the relevant retention periods have expired, personal data will be deleted or anonymised unless it must be retained in a restricted form to comply with legal obligations.
10. Personal Data Security
WebTaco implements appropriate technical and organisational measures to protect personal information against unauthorised access, loss, alteration, disclosure, and accidental or unlawful destruction.
Depending on the circumstances, these measures include:
The use of encrypted HTTPS connections.
Access controls for systems storing personal information.
Restricting data access to authorised individuals.
Using Stripe as a specialised payment processing provider.
Maintaining and protecting computer systems.
Implementing procedures to manage potential security incidents.
WebTaco does not directly store complete payment card numbers or card security codes.
No electronic system can guarantee absolute security, but WebTaco is committed to maintaining protective measures appropriate to the risks associated with processing personal data.
11. User Rights
Users may exercise the rights recognised under applicable data protection legislation, including:
The right to access their personal data.
The right to rectify inaccurate data.
The right to request deletion where applicable.
The right to object to certain processing activities.
The right to request restriction of processing.
The right to data portability where applicable.
The right to withdraw previously granted consent.
To exercise these rights, users may submit a request to:
WebTaco will respond to requests within the legally established time limits.
Users also have the right to lodge a complaint with the Spanish Data Protection Agency:
12. Cookies and Similar Technologies
The WebTaco website may use technical cookies necessary for its operation and secure payment processing.
Stripe may use cookies and similar technologies related to payment authentication, security, and fraud prevention.
Where analytics, advertising, or other technologies requiring consent are used, WebTaco will request such consent before using them.
Detailed information about the cookies used, their purposes, providers, and retention periods must be provided in the corresponding Cookie Policy.
13. Automated Processing
WebTaco uses automated processes to manage orders, receive payment confirmations, and prepare or deliver purchased services.
These processes enable the management of purchases and the delivery of digital products.
Stripe may use automated systems to detect potentially fraudulent transactions and assess transaction security.
Where applicable, users may exercise their rights under data protection legislation in relation to automated decisions that produce legal or similarly significant effects.
14. Changes to This Privacy Policy
WebTaco may update this policy to reflect changes in its services, technical procedures, or legal requirements.
The current version will be available on the WebTaco website and will indicate the date of its latest update.
15. Contact
For any questions regarding this Privacy Policy or the processing of your personal data, please contact:
Ramón Simarro S.L.
Trading name: WebTaco
Tax identification number (CIF): B-84170463
Calle Reyes Católicos 1, B5P2BD
28660 Boadilla del Monte, Madrid, Spain.
Email: info@webtaco.net
Website: https://webtaco.net