This website does not collect personal data automatically, has no contact forms, and installs no cookies. If you only visit this website, the only personal data we may process is what you voluntarily provide when contacting us by phone or email. If you also use the Warnapp platform, section 2 sets out what we process.
From this website we only process the data you voluntarily and directly provide when contacting us:
By email: your name, email address and the content of your message.
By phone: the number you call from and any information you share during the call.
This website does not collect data automatically: there are no forms, no analytics tools, no tracking pixels and no cookies of any kind.
If you also use the Warnapp platform (web portal or mobile app), we process:
Your account details: name, email address, phone number if you provide one, profile photo if you upload one, and preferred language.
Sign-in data: encrypted password, two-step verification if you enable it, any Google or Apple accounts you link, and connection data (IP address, device and browser) so that we can show you your sessions and detect unauthorised access.
Content you enter when reporting an incident: description, geographic location and any photographs or documents you attach.
Location is only captured when you create an incident, and you can turn off automatic capture in the app settings and type the address by hand. Bear in mind that a photograph may capture people or number plates unrelated to the incident: please try to avoid it.
For that incident data, the controller is the company or organisation you access from, and Warnapp acts as processor on its behalf. To exercise your rights over it, contact that company.
3. Purpose of processing
Data is used exclusively to:
Handle and respond to your enquiry or information request.
Manage the commercial relationship if you decide to subscribe to the Warnapp service.
We do not use your data for marketing and do not use it for any purpose other than those stated above. The providers that process it on our behalf are listed in section 6.
4. Legal basis for processing
Handling enquiries: consent of the data subject (Art. 6.1.a GDPR), by voluntarily contacting us.
Contractual relationship: performance of a contract or pre-contractual measures (Art. 6.1.b GDPR).
5. Retention period
Enquiries: for as long as necessary to handle them and, where they lead to a contractual relationship, for the duration of that relationship and the applicable legal limitation periods (generally 5 years under commercial law).
Your account: for as long as it exists. If you close it, a 15-day grace period begins during which signing in restores it; after that, your personal data is irreversibly anonymised and your password, two-step verification, sessions, devices and linked accounts are deleted.
Activity log: 24 months. It records sign-ins and sensitive operations so that misuse can be detected and evidenced. For that reason it is not deleted when you close your account: it expires on its own once the period elapses.
Acceptance of the terms: kept for as long as it may be necessary to evidence that you accepted them.
Incidents and attachments: retained by the company you access from, which decides their retention period.
6. Recipients
We do not share your personal data with third parties, except where required by law.
We do rely on providers that process it on our behalf and on our instructions, under the corresponding processing agreement:
Service hosting and database.
File and image storage, on servers located in Spain.
Email delivery.
Push notification delivery to your device.
You can request an up-to-date list of these providers by writing to hola@warnapp.dev.
7. International transfers
Push notifications are delivered through Firebase Cloud Messaging, from Google LLC (United States), which involves an international transfer. It relies on the EU-US Data Privacy Framework and on standard contractual clauses approved by the European Commission.
If you link a Google or Apple account to sign in, authentication takes place with those providers under their own privacy policies; we only receive confirmation of your identity.
All other providers process data on servers located within the European Economic Area.
8. Your rights
You may exercise the following rights regarding your personal data at any time:
Access: know what data we hold about you.
Rectification: correct inaccurate or incomplete data.
Erasure: request deletion of your data when, among other reasons, it is no longer necessary.
Restriction: request that we restrict the processing of your data.
Portability: receive your data in a structured, machine-readable format.
Objection: object to processing based on legitimate interest.
To exercise any of these rights, write to us at hola@warnapp.dev indicating the right you wish to exercise and providing proof of identity. We will respond within a maximum of one month.
If you believe that the processing of your data does not comply with applicable law, you may lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.