Privacy policy

Data controller

The controller for the processing described here is POLA PARK S.L.

Information we do not collect

The public pages do not request the visitor’s name, email address, telephone number or other identifying information. They do not use cookies, local storage, advertising analytics or technologies intended to track users across websites.

Link counters

Opening a short or tracked link increments an aggregate counter for that link. No individual visit record is created, and the counter does not store the IP address, device, referrer or access date.

Review accesses

When a valid /review address is used, the associated employee identifier and the date and time of access are recorded and the accumulated total is incremented. This record is used for internal operational recognition and does not identify the visitor.

Employee information is managed internally with restricted access and without automated decisions, sanctions or incentives based exclusively on this data.

Security and technical data

The User-Agent is examined transiently to prevent bots from increasing statistics. To limit abuse, the IP address is transformed using HMAC and the resulting fingerprint is retained for the rate-limit window; the application does not retain the plain IP address.

Only when a limit is exceeded is a non-reversible part of that fingerprint recorded for 14 days together with the limit type and route. The server, content delivery network and storage may also generate technical delivery and security logs under their contractual retention periods.

Purposes and legal basis

Technical data is processed to deliver content, maintain security, prevent abuse, diagnose errors and produce aggregate statistics. The legal basis is Pola Park’s legitimate interest in operating and protecting its digital services under Article 6(1)(f) GDPR.

Employee-related records serve internal organisation and recognition purposes and are explained separately to the people concerned.

Recipients and transfers

Technical data may be accessed by hosting, cache, storage, CDN, maintenance and security providers acting as processors. Data is not sold or disclosed for advertising purposes.

If a provider processes information outside the European Economic Area, Pola Park will apply the safeguards required by the GDPR. Provider locations and safeguards are reviewed before each deployment.

Retention

Rate-limit fingerprints expire at the end of their operational window and this site’s application logs are retained for 14 days. Infrastructure logs are retained for the security periods agreed with each provider.

Aggregate counters remain available while useful for understanding link usage. The employee-date detail for /review has no automatic purge and its necessity is periodically reviewed against its internal purpose and applicable liabilities.

Your rights

You may request access, rectification, erasure, restriction or objection where applicable by writing to info@polapark.com or to the postal address shown on this page. The request must allow the identity of the applicant to be verified.

You may also lodge a complaint with the Spanish Data Protection Agency at www.aepd.es.

External links

Google Play, the App Store, Google Reviews and social networks operate under their own policies once the user leaves this site. Pola Park does not install their cookies or embed their widgets on these pages.