Privacy policy
Last updated: 4 September 2026.
This policy explains which personal data we process on ofrezo.es, why, on what legal basis, for how long and what rights you have, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
Email: admin@ofrezo.es · Phone: 614 340 381 · Domain: ofrezo.es
The owner's identification details are provided by the domain holder and published as soon as the technical team receives them.
2. What data we process and where it comes from
| When | Data |
|---|---|
| You create an account | Name, email address and password (stored encrypted). If you sign in with Google or Facebook: the identifier and email that service provides us. |
| You complete your profile | Phone (and whether it is WhatsApp), website, Instagram, Facebook, profile picture and whether you want to display your email. |
| You publish a listing | Title, description, category, city and service radius, price level and photos. Your profile's contact details are shown publicly on the listing and may be indexed by search engines. |
| You use the contact form | Name, email, phone, category, area, message, and the date and time you accept this policy and, if ticked, the news notice. |
| You report a listing | Reason, details and your IP address. |
| You browse the site | IP address, browser and requested pages in the server's technical logs. Our own anonymous counter of views and contacts per listing (it does not identify you). Campaign parameters (utm) stored in your browser's local storage. |
| You buy a featured listing (when available) | Billing details and Stripe customer identifier. Your card details are handled by Stripe and never reach our servers. |
3. Purposes and legal basis
- Providing the service (account, publishing and managing listings, statistics about your listing, notices about it): performance of a contract (art. 6.1.b GDPR).
- Answering your enquiry from the contact form: consent (art. 6.1.a).
- Sending you the launch notice and news: only if you tick the corresponding box; consent that you can withdraw at any time.
- Moderating content, preventing fraud and abuse and keeping the site secure: legitimate interest (art. 6.1.f).
- Invoicing and tax obligations for featured listings: legal obligation (art. 6.1.c).
4. Publication of data in listings
When you publish a listing you decide which contact details are shown. That information is public, visible to every visitor and may be collected by search engines and AI assistants. You can edit it or withdraw the listing at any time from My account.
5. Recipients and processors
- Hosting and technical maintenance: Incrementa Marketing, on OVHcloud servers located in the European Union.
- Email: OVHcloud (EU), for service notifications and contact form enquiries.
- Maps: map images are loaded from tile.openstreetmap.org, operated by the OpenStreetMap Foundation (United Kingdom, a country covered by a European Commission adequacy decision). When a map is displayed, that server receives your IP address and the area viewed.
- Payments (once featured listings are enabled): Stripe Payments Europe Ltd. (Ireland), which may transfer data to Stripe Inc. (USA) under the EU-US Data Privacy Framework and standard contractual clauses.
- Sign-in with Google or Facebook: only if you choose to use it, Google Ireland Ltd. or Meta Platforms Ireland Ltd. send us your identifier and email.
We do not sell or share your data with third parties for commercial purposes. We use no third-party analytics or personalised advertising. The site's fonts are served from our own server.
6. International transfers
By default your data is processed in the European Union. Transfers outside the EU only occur if you use Google or Facebook sign-in or buy a featured listing through Stripe, as described above.
7. Retention periods
- Account data and listings: while the account is active. When you delete it, data is erased within 30 days.
- Contact form enquiries: 24 months from the last communication.
- Server technical logs and listing reports: 12 months.
- Billing data: 6 years, as required by tax and commercial law.
8. Your rights
You may access, rectify and erase your data, object to or restrict its processing, request its portability and withdraw consent at any time by writing to admin@ofrezo.es. We will reply within one month. From My account you can edit your profile, withdraw your listings and delete your account with all its data.
If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid).
9. Security
All communication with the site is encrypted (HTTPS). Passwords are stored with irreversible hashing (bcrypt). Access to data is restricted to the necessary technical staff and servers are located in the European Union.
10. Cookies and local storage
ofrezo.es uses no third-party or advertising cookies. It only uses a strictly necessary session cookie to keep you signed in and a technical cookie indicating whether you are signed in. It also stores in your browser's local storage the campaign parameters you arrived with (utm) and your browsing preferences; that information never leaves your browser except to attribute the origin of a contact message you send. As no tracking cookies are used, no consent banner is required.
11. Minors
The site is intended for people over 18. We do not knowingly create accounts for minors; if we detect one, we will delete it.
12. Changes to this policy
Any change will be published here with its date. If a change affects the legal basis or purpose of a processing activity, we will notify you by email.
