Privacy Policy
This page explains which personal data we process when you visit 360stark.com, why, and on which legal basis (GDPR and Spanish LOPDGDD and LSSI-CE).
1. Controller
[Company name / owner]
[Street and number]
[Postcode and town, Spain]
[Tax ID]
Email: mail@360stark.com · Phone/WhatsApp: +34 657 730 100
2. Hosting and server logs
The website runs on a server of [hosting provider, address] in the EU. Each visit processes technically necessary data (IP address, date and time, page, referrer, browser, operating system) to deliver the site, keep it secure and fix errors (Art. 6(1)(f) GDPR). Logs are deleted after [7] days. A data processing agreement is in place (Art. 28 GDPR).
3. Encryption
The site uses SSL/TLS encryption (https).
4. Fonts
All fonts are served from our own server. No connection is made to Google Fonts or other font providers.
5. Browser storage
We only store what the site needs to work in your browser: language, light/dark mode and your privacy choice (Art. 6(1)(f) GDPR). Everything else only with your consent. See the Cookie Policy.
6. Own visitor statistics without cookies
We count page views on our own server: page, referrer, language, campaign parameters (UTM), device type and browser. A daily value is derived from IP address and browser using a secret key and changes every day; the IP address itself is not stored, no cookies are set and no data is shared (Art. 6(1)(f) GDPR).
7. Google Analytics 4 (consent only)
If you allow “Statistics” in the cookie settings, we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Cookies are set and usage data (pages, time on site, device, approximate location) is processed; Google shortens IP addresses. Data may be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. Data is deleted after [14] months.
8. External media (consent only)
Portfolio
Without your consent, the portfolio only shows screenshots hosted on our own server. If you allow external content (in the cookie banner), the client’s website is embedded – in the iPhone automatically in its mobile view once the project is on screen; its operator then receives your IP address and technical data (Art. 6(1)(a) GDPR). Clicking a project opens the website in a new tab.
Digital assistant “Jarvis”
On our website you can write or talk to our assistant Jarvis. We point this out before you send your first message. Jarvis first answers on our own server from our own knowledge base. We store the conversation (messages, language, page visited, time and your rating of an answer) for at most 90 days to handle your request and improve Jarvis; questions Jarvis could not answer are used, without personal data, to extend its knowledge. Your IP address is only stored as an irreversible hash to prevent abuse. If you give us your name and email or phone and want to be contacted, we create a request in our customer system. If Jarvis cannot answer reliably from that knowledge, the question, the conversation so far and relevant excerpts of our knowledge are sent to Google Gemini (Google Ireland Limited or Google LLC, USA; certified under the EU-US Data Privacy Framework) to phrase the answer. For the voice output, Jarvis’s answer text is also sent to Google to generate the audio. Voice input uses your browser’s speech recognition (e.g. Google in Chrome, Apple in Safari); reading answers aloud happens in the browser. Legal bases: Art. 6(1)(b) GDPR (request) and Art. 6(1)(f) GDPR (answering questions on our website). Please do not enter sensitive data in the chat.
9. Contact by email, phone and WhatsApp
If you contact us we process your details to handle your request (Art. 6(1)(b) GDPR for quotes and contracts, otherwise Art. 6(1)(f)). WhatsApp links open WhatsApp by WhatsApp Ireland Limited (Meta), subject to its own privacy policy.
10. Social media links
We only use plain links, no plugins: no data is sent until you click a link.
11. Invoices, quotes and payments
Clients receive invoices and quotes via a personal link. Online payments are handled by Stripe Payments Europe, Ltd. (Ireland) (Art. 6(1)(b) and (c) GDPR). Billing data is kept for the statutory periods.
12. Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR) and may withdraw consent at any time (Art. 7(3) GDPR) by writing to mail@360stark.com. You may also lodge a complaint with a supervisory authority, e.g. the Spanish AEPD (aepd.es).
13. Retention
We keep data only as long as needed for each purpose or required by law.
Last updated: October 2026