This policy explains how Private Suppliers (“we”, “us”) processes your personal data when you visit privatesuppliers.es, contact us or buy one of our products, in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).
1. Data controller
- Controller Private Suppliers
- Privacy contact Telegram, WhatsApp or Discord (links on the home page)
2. What data we collect
- Contact and messaging data: when you write to us on Telegram, WhatsApp or Discord we receive your username or phone number, profile name and the content of your messages.
- Order and payment data: the product purchased, amount, date, payment method and transaction reference. Card details are processed by the payment provider; we do not store them.
- Technical data: when you visit the Website, our hosting provider and the content delivery networks we use (see section 5) automatically process your IP address, browser type, device and the date and time of access.
We do not use analytics or advertising tracking on the Website. We do not knowingly collect data from people under 18.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering your enquiries before purchase | Steps at your request prior to a contract — Art. 6(1)(b) |
| Processing your order, delivering access and providing support and updates | Performance of a contract — Art. 6(1)(b) |
| Accounting, invoicing and tax records | Legal obligation — Art. 6(1)(c) |
| Operating and securing the Website, preventing fraud and misuse of our lists | Legitimate interest — Art. 6(1)(f) |
4. How long we keep your data
We do not keep your personal data. We do not maintain a customer database or mailing list:
- Enquiries and order conversations are deleted from our side once your question has been answered or your access has been delivered.
- Payment data stays with the payment provider; we do not store it.
- Technical server logs are kept only by our hosting provider, under its own retention policy.
The only exception is the minimum transaction record (amount, date and payment reference) that tax law may oblige us to keep for the legally required period.
5. Recipients
We only share your data with providers we need to run our service, who act as processors or independent controllers:
- Messaging platforms: Telegram, WhatsApp (Meta) and Discord, under their own privacy policies.
- Payment providers: PayPal, Stripe (card payments), our bank (SEPA transfers) and our crypto payment provider.
- Hosting provider: self-hosted server located in Spain.
- Security and DDoS protection: Cloudflare, Inc., which processes your IP address and technical request data to protect the Website against attacks. Fonts, styles and scripts are served from our own server.
- Public authorities and advisers (e.g. tax authority, accountant) when required by law.
We never sell your personal data.
6. International transfers
Some of these providers may process data outside the European Economic Area (for example in the United States). In those cases the transfer is covered by an adequacy decision (such as the EU–U.S. Data Privacy Framework) or by the European Commission's Standard Contractual Clauses.
7. Your rights
You have the right to access, rectify and erase your data, restrict or object to its processing, and receive it in a portable format. Where processing is based on consent, you may withdraw it at any time. To exercise your rights, contact us via Telegram, WhatsApp or Discord; we will reply within one month.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in your country of residence.
8. Security
We apply appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, including encrypted connections (HTTPS) and restricted access to customer records.
9. Changes to this policy
We may update this policy to reflect legal or service changes. The date at the top of this page shows the latest version.