Warnapp complies with EU Regulation 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection (LOPDGDD). This page summarises how we apply these principles both on the presentation website and within the service platform.
1. Two distinct contexts
It is important to distinguish between two scopes:
Presentation website (warnapp.dev): collects no data automatically, uses no cookies, has no forms. The only data that may be processed is what you provide when contacting us directly.
Warnapp platform (SaaS service): manages incidents and may therefore contain data from users in your organisation. In that case, you act as Data Controller and we act as Data Processor. This is formalised through the relevant service agreement.
2. Principles we apply
In line with Article 5 of the GDPR, we apply the following principles:
Lawfulness, fairness and transparency: we only process data on a legitimate legal basis and inform you accordingly.
Purpose limitation: data is used exclusively for the purposes declared.
Data minimisation: we only collect data that is strictly necessary.
Accuracy: we keep data up to date and correct inaccuracies.
Storage limitation: data is not retained longer than necessary.
Integrity and confidentiality: we apply appropriate technical and organisational measures to protect data.
3. Legal bases for processing
Consent (Art. 6.1.a): when you contact us voluntarily.
Contract performance (Art. 6.1.b): to manage the service relationship.
Legal obligation (Art. 6.1.c): where law requires us to retain certain data.
Legitimate interests (Art. 6.1.f): for the security and integrity of the service.
4. Your rights as a data subject
The GDPR grants you the following rights, which you can exercise by writing to hola@warnapp.dev:
Right of access (Art. 15): know what data we hold about you and for what purpose.
Right to rectification (Art. 16): correct inaccurate or incomplete data.
Right to erasure ("right to be forgotten") (Art. 17): request deletion of your data when it is no longer necessary or you withdraw consent.
Right to restriction of processing (Art. 18): request that we suspend processing under certain circumstances.
Right to data portability (Art. 20): receive your data in a structured, machine-readable format.
Right to object (Art. 21): object to processing based on legitimate interests.
Right not to be subject to automated decisions (Art. 22): we do not make automated decisions with significant effects on data subjects.
We will respond to your request within a maximum of 30 days (extendable to 3 months in complex cases, with prior notice).
5. Security measures
TLS encryption of all communications at every point of contact.
Restricted data access through authentication and role-based controls.
Daily backups stored in EU territory.
Infrastructure hosted in EU-certified data centres.
Access logging and change auditing within the platform.
6. International transfers
We do not transfer personal data outside the European Economic Area. All storage and processing systems are located within EU territory.
7. Data Protection Officer (DPO)
Depending on the volume and nature of processing, we assess whether appointing a DPO is required. For data protection enquiries, contact us at hola@warnapp.dev.
8. Supervisory authority
If you consider that your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Authority (AEPD):