Privacy & cookie policy
Last updated: 18 October 2026 · This is a translation; in case of discrepancy the Spanish version prevails.
1. Controller
Network Place S.L. (Tax ID B40203689), registered office at C/ Pablo Freire, 10, local 3, 28918 Leganés (Madrid), Spain. Privacy contact: [email protected].
2. What we process, why and on what legal basis
| Activity | Data | Purpose | Legal basis (GDPR) | Retention |
|---|---|---|---|---|
| Usage measurement | Anonymous actions on the site (visit, check, click), referring page or campaign and device type. No IP, no cookies, no identifier | Understand what works on the site | Legitimate interest (art. 6.1.f) | 24 months |
| Full report request | Name, work email, brand, website, country and affiliate network. Your IP address, only in memory and hashed, to prevent abuse (discarded within 24 h; never stored on disk) | Prepare and send you the report | Consent and pre-contractual steps at your request (art. 6.1.a and 6.1.b) | 12 months if you do not become a customer |
| Google ad measurement | If you arrive from one of our ads on Google, the click identifier Google adds to the address (gclid) is sent with your request. No cookies, nothing stored in your browser | Know which requests come from our ads and tell Google which clicks led to a request (identifier, date and time only; never your name or email) | Legitimate interest in measuring our advertising (art. 6.1.f) | With the request (12 months); Google accepts this data for 90 days after the click |
| Marketing emails | Name and email | Send you information about Pujalerta | Your express consent, separate optional checkbox (art. 6.1.a) | Until you withdraw it |
| Customers | Contact and billing data, monitored brands and countries | Provide the service, alerts, reports and invoicing | Contract and legal obligations (art. 6.1.b and 6.1.c) | Contract term plus statutory periods (6 years commercial, 4 years tax) |
| Postal letters | Company data (name and address); letters are addressed to a role, not a person | Inform a company about ads detected on its brand and offer the service | Legitimate interest in B2B marketing (art. 6.1.f) | Until the company objects, max. 24 months |
Reports may include public identifiers of advertisers and affiliates (domains or affiliate IDs shown on public pages). They are shared only with the owner of the affected brand, so it can manage its affiliate programme, and are never published.
3. Processors
We do not sell or share your data. It is processed on our behalf by: Supabase (database, EU servers), Railway (hosting, EU servers in Amsterdam; US company), Cloudflare (DNS, security, bot protection and aggregated visit statistics, EU/USA), Resend (email, USA), Stripe (payments, EU/USA) and SearchAPI (Google results; receives only brand names and searches, no personal data). Google Ireland Ltd. receives the click identifier, date and time of requests that came from our ads, as an independent controller under its Google Ads data protection terms. Transfers outside the EU rely on the EU-US Data Privacy Framework or standard contractual clauses.
4. Cookies
Pujalerta does not use cookies for analytics, advertising or tracking, and loads no third-party fonts or pixels, so there is no consent banner. Usage is measured with anonymous first-party events (no cookies, IP or identifiers) and Cloudflare Web Analytics, which according to Cloudflare uses neither cookies nor fingerprinting.
5. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent at any time, by writing to [email protected]. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or your local supervisory authority. We make no automated decisions with legal effects and do no profiling.