1. Data we collect
We collect information you provide directly and data generated by your use of our services.
Data you provide
- Account information: name, email address and password when you register.
- Profile information: photo, bio and other data you add voluntarily.
- Communications: messages you send us through the contact form.
Automatically collected data
- Usage data: pages visited, time spent and actions performed.
- Device data: device type, operating system and browser.
- Location data: country and region inferred from IP address.
2. How we use your data
We use the information collected for the following purposes:
- Provide, operate and maintain our services.
- Improve, personalize and expand the user experience.
- Communicate with you about updates and support.
- Process transactions and send related information.
- Comply with applicable legal obligations.
Legal basis: The processing of your data is based on consent, contract performance and legitimate interest, as applicable to each purpose.
3. Sharing information
We do not sell or rent your personal data. We may share information with:
- Service providers: third parties that help us operate the platform (hosting, payments, email).
- Legal compliance: competent authorities when required by law or to protect rights.
- Business transfers: in case of merger or acquisition, your data may be transferred to the new owner.
5. Security
We implement appropriate technical and organizational measures to protect your data:
- SSL/TLS encryption for all communications.
- Encrypted password storage.
- Restricted access to personal data to authorized personnel only.
- Periodic security audits.
To report a security incident, contact our team at security@imora.es.
6. Your rights
As a user within the scope of GDPR, you have the following rights:
- Access: request a copy of the personal data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion of your data ('right to be forgotten').
- Portability: receive your data in a structured, commonly used format.
- Objection: object to the processing of your data in certain circumstances.
To exercise any of these rights, email us at privacy@imora.es. We will respond within a maximum of 30 days.
7. Data retention
We retain your personal data for as long as necessary to fulfill the purposes described in this policy, including compliance with legal obligations.
When your data is no longer needed, we will securely delete or anonymize it.
8. International transfers
Your data may be transferred to countries outside the European Economic Area. In such cases, we will ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
9. Contact the controller
For any queries about this policy or to exercise your rights, contact our Data Protection Officer: