Privacy Policy

Last updated: 8 October 2026

This policy explains what personal data we process when you visit www.repscan.com, contact us or purchase our services, what we use it for, on what legal basis, how long we keep it, who we share it with and how you can exercise your rights, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights (Ley Orgánica 3/2018, de Protección de Datos Personales y garantía de los derechos digitales, LOPDGDD).

In brief

The controller is Repscan Technology, S.L. You can write to our data protection officer at dpo@repscan.com.
We use your data to handle your inquiries, provide the services you purchase and meet our legal obligations. Only if you agree do we also use it to send you marketing communications and to measure and personalize advertising.
We only share your data with the providers who help us deliver the service and, when you ask us to, with the platforms and websites to which we submit content removal requests.
You can access, correct and delete your data and exercise your other rights at any time, free of charge.

Who is the controller

The controller of your data is Repscan Technology, S.L. (RepScan), with Tax ID (NIF) B42758102 and registered address at Av. Diagonal, 534, 2nd floor, door 2, 08006 Barcelona (Spain), telephone +34 936 38 65 59.

We have appointed a data protection officer, whom you can contact at dpo@repscan.com with any question about how we process your data. All the processing activities we describe here are listed in our record of processing activities.

What data we process

Depending on how you deal with us, we may process the following data:

Identification and contact data: first name and surname, email address, phone number and, if you contact us on behalf of a company, the company and your job title.
Data about your inquiry or case: what you tell us through forms, chat, WhatsApp, email or calls, and the information needed to provide the service, such as the links and content that affect you or the details of your online profiles and businesses.
Contract, billing and payment data: tax details, services purchased, amounts and payment method. Your full card details are handled directly by the payment provider.
Browsing data: IP address, type of device and browser, pages visited and interactions with the website, obtained through cookies and similar technologies depending on what you choose. We explain this in the cookie policy.
Special categories of data: only when they are part of the content you ask us to remove (for example, intimate images or information about health or sex life) and solely to provide the service you have purchased.

If you give us data about other people, for example because you purchase the service for a family member or tell us who published a piece of content, you guarantee that you are entitled to do so and that you will inform them where necessary. You are responsible for making sure that the data you give us is true and up to date.

What we use your data for, on what legal basis and for how long

Purpose	Legal basis	Retention
Handling your inquiries and requests for information or a quote by form, chat, WhatsApp, phone or email.	Taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) and, for general inquiries, your consent (Article 6(1)(a) GDPR).	While we handle your request and follow it up. If you do not purchase, we delete the data when it is no longer needed for that purpose.
Providing the services you purchase: analyzing your case, detecting and monitoring content, managing its removal or de-indexing with platforms, search engines, websites and, where applicable, authorities, and managing your business’s reviews.	Performance of the contract (Article 6(1)(b) GDPR). For special categories of data, your explicit consent (Article 9(2)(a) GDPR) and, where applicable, the establishment, exercise or defense of legal claims (Article 9(2)(f) GDPR).	For the duration of the contract and, afterwards, for the limitation periods of any legal actions that may arise from it.
Invoicing, accounting, collection of payments and compliance with tax obligations.	Compliance with legal obligations (Article 6(1)(c) GDPR) and performance of the contract.	Six years, under Article 30 of the Commercial Code (Código de Comercio), and the periods required by tax law.
Customer service, support, and handling of incidents and complaints.	Performance of the contract, our legitimate interest in handling your requests (Article 6(1)(f) GDPR) and, for consumer complaints, compliance with legal obligations.	While we handle the request and, afterwards, for the applicable limitation periods.
Sending you marketing communications about our services by email or other electronic means.	Your consent (Article 6(1)(a) GDPR) or, if you are already a customer, our legitimate interest in informing you of services similar to those you purchased, under Article 21(2) of Law 34/2002 on information society services and electronic commerce (Ley 34/2002, LSSI).	Until you withdraw your consent or object. You can unsubscribe from any mailing.
Measuring website use, showing you personalized advertising and identifying the company you visit us from so we can offer it our services, through cookies.	Your consent (Article 6(1)(a) GDPR).	The lifespan of each cookie, as stated in the cookie policy.
Keeping a record of your cookie choice.	Compliance with the legal obligation to be able to demonstrate consent (Articles 6(1)(c) and 7(1) GDPR).	24 months.
Managing your interactions with our social media profiles.	Your consent and our legitimate interest in assisting you (Article 6(1)(f) GDPR).	For as long as you keep interacting, and according to each social network’s terms.
Publishing and moderating the reviews you send us.	Your consent (Article 6(1)(a) GDPR).	For as long as the review remains published or until you ask us to remove it.
Protecting the security of the website and preventing fraud and abuse.	Our legitimate interest (Article 6(1)(f) GDPR).	The time needed for that purpose.
Responding to requests from authorities and defending our rights against claims.	Compliance with legal obligations (Article 6(1)(c) GDPR) and our legitimate interest (Article 6(1)(f) GDPR).	For the applicable limitation periods.

When these periods end, we keep the data blocked, available only to judges, courts and public administrations, for as long as liability arising from the processing may be claimed, and then we delete it (Article 32 LOPDGDD).

Where our legitimate interest is the legal basis, we have checked that your interests and rights do not override it, and you can object at any time.

Website chat and artificial intelligence

The website chat window may be handled by an artificial intelligence assistant, as stated in the chat itself. We use it to answer your questions and, when needed, to pass your inquiry to our team. We keep the conversation to handle your inquiry and follow it up, on the same legal basis and for the same period as other inquiries. We recommend that you do not include sensitive data in the chat unless it is necessary.

Automated decisions and profiling

When you hire us to do so, we use automated tools, including artificial intelligence, to search for, detect and classify content that may affect you. The actions we take on your behalf are decided and reviewed by our team, so we do not make decisions based solely on automated processing that produce legal effects concerning you or similarly affect you (Article 22 GDPR).

Some advertising tools may build profiles from your browsing to decide which ads to show you, but only if you accept marketing cookies.

Who we share your data with

We do not disclose your data to third parties except in these cases:

Providers that process data on our behalf (processors), with whom we have signed the contract required by Article 28 GDPR: website hosting and maintenance; management of customers, forms, chat and customer service (Zoho); email and work tools; analytics and advertising (only with your consent); payment gateways and financial institutions; and legal, tax and accounting advisers.
Companies in our group, when necessary to provide you with the service.
Platforms, search engines, social networks, websites and, where applicable, authorities or courts to which we submit, on your behalf and with your authorization, requests for the removal or de-indexing of content. We only share the data strictly necessary for each request.
Public administrations, judges and courts, when required by law.
Advertising companies and social networks that install cookies, only if you accept them. Each is responsible for its own processing, as we explain in the cookie policy.

If you visit our social media profiles, the social network and RepScan are joint controllers for some processing, such as page visit statistics (judgment of the Court of Justice of the European Union of 5 June 2018, Case C-210/16). For everything else, each social network’s privacy policy applies.

International transfers

Some of our providers, such as those for analytics, advertising or work tools, are based or have their servers outside the European Economic Area, mainly in the United States. The Zoho services we use run on its European platform (zoho.eu).

When the company is certified under the EU-U.S. Data Privacy Framework, the transfer is based on the European Commission’s adequacy decision of 10 July 2023. In other cases, we apply the safeguards provided for by the GDPR, such as the standard contractual clauses approved by the European Commission, together with any additional measures that are necessary. You can ask us for more information or a copy of these safeguards at dpo@repscan.com.

Your rights

You can exercise these rights at any time, free of charge:

Access: find out what data of yours we process and why.
Rectification: correct inaccurate or incomplete data.
Erasure: ask us to delete your data when it is no longer necessary, among other cases.
Objection: object to our processing of your data on grounds relating to your particular situation or for direct marketing purposes.
Restriction of processing: ask us to suspend processing, for example while we verify the accuracy of your data, or to keep your data so that you can establish or defend legal claims.
Portability: receive your data in a structured, commonly used format, or have us transmit it to another controller.
Not to be subject to automated decisions that produce legal effects concerning you or similarly affect you.
Withdraw your consent at any time, without affecting the lawfulness of the processing carried out before.

To exercise them, write to us at dpo@repscan.com or by post to Repscan Technology, S.L., Av. Diagonal, 534, 2nd floor, door 2, 08006 Barcelona, stating the right you want to exercise. If we have doubts about your identity, we may ask you for additional information to confirm it. We will reply within one month, which may be extended by a further two months if the request is complex or numerous, in which case we will let you know.

If you believe we have not processed your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD, C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es) or with the data protection authority of the country where you live or work (in the United Kingdom, the ICO). If you prefer, you can write to our data protection officer first.

Minors

The website is not directed at children under 14. People over 14 can give their consent themselves; below that age, consent must be given by their parents or guardians (Article 7 LOPDGDD). When a service affects a minor, the minor’s parents or guardians are the ones who purchase it and give us the minor’s data.

Security and confidentiality

We process your data confidentially and have adopted technical and organizational measures appropriate to the risk to protect it against loss, unauthorized access or misuse. Our team and our providers have a duty of confidentiality. If a security breach occurred that posed a high risk to your rights, we would notify you without undue delay (Article 34 GDPR).

Cookies

In the cookie policy we explain which cookies we use, what they are for and how you can accept or reject them or change your choice at any time.

Changes to this policy

We will update this policy when our processing activities or the regulations change. You will see the date of the latest version at the top of this page and, if the changes are significant, we will tell you by the usual means. Together with the legal notice and the cookie policy, this policy forms part of the website’s terms of use.