>
FedCrest
← Back to home

Legal notice and privacy

1. Website owner

In accordance with Article 10 of Spanish Law 34/2002 on Information Society Services (LSSI-CE), this website is operated by:

2. Terms of use

Access to this site is free. The general information on this site is not a contractual offer. For custom work, prices and conditions are confirmed in a written proposal. For the Starter and Standard packages, the prices and conditions shown on the payment and start pages and in the Terms of service apply once you pay the deposit. The content and the FedCrest name belong to the owner and may not be reproduced without permission.

3. Data protection and privacy

Controller: the website owner identified above, at the contact details given.

Data we process: (a) what you send through the enquiry form or by email: name, email address, organization, type and size of organization, optional phone number, times for a call and your message; (b) when you pay online: name, billing details, VAT number, organization and payment status, which we receive from Stripe (we never receive card numbers); (c) if you start without a call, the onboarding form: your role, phone number (optional), type and size of organization, whether you work with people under 18, languages, where your member data is today, cloud account status and any notes; (d) technical logs needed to deliver and secure the site, such as IP address.

Purposes and legal basis: to reply to your enquiry and prepare a proposal (pre-contractual measures at your request, GDPR Art. 6(1)(b)); to take payment, issue invoices and meet tax obligations (contract and legal obligation, Art. 6(1)(b) and (c)); to keep the site secure and measure aggregate usage (legitimate interest, Art. 6(1)(f)).

Retention: enquiries that do not lead to an engagement are deleted after 12 months. Onboarding details of paying customers are kept while the contract lasts and then for the legal limitation periods. Invoices and payment records are kept for the periods required by Spanish tax and commercial law (up to six years).

Recipients (processors): Cloudflare (hosting, analytics, email routing, spam protection), Google (our mailbox), Resend (delivery of form messages) and Stripe (payments). Stripe also acts as an independent controller for payment processing and fraud prevention, under its own privacy policy. We do not sell your data or pass it on for marketing.

International transfers: some of these providers are based in the United States. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.

Your rights: access, rectification, erasure, objection, restriction and portability, by writing to [email protected]. You may also complain to the Spanish Data Protection Agency (www.aepd.es).

4. Cookies

This site sets no cookies and shows no cookie banner. See the cookie policy for what the site stores on your device and how analytics works.

5. Governing law

This notice is governed by Spanish law. Any dispute will be handled by the courts that have jurisdiction under applicable rules.

Last updated: November 2026.