Dossalis › Privacy
Privacy policy
Last updated: 2 August 2026
This page explains what data of yours we handle, why, for how long, and what you can ask us for at any moment. It is written to meet Regulation (EU) 2016/679 and Spanish Organic Law 3/2018, and to be understood on the first read.
1. Data controller
| Controller | [SOCIEDAD TITULAR] |
|---|---|
| Tax number | [NIF] |
| Address | [DOMICILIO SOCIAL] |
| Privacy contact | privacy@dossalis.com |
We are not required to appoint a data protection officer. If that changes, the contact details will be published here.
2. What we collect
We handle name and surname, email address, phone number if you provide one, company name and activity, the product and supplier references you enter in the panel, and the history of verifications with their dates. We also log basic technical connection data such as the IP address, date and time, in order to keep the service secure.
We neither ask for nor want special category data (health, beliefs, trade union membership and the like). If you type it into a free-text field, we delete it.
3. Why we use it, and on what legal basis
| Purpose | Legal basis | Retention |
|---|---|---|
| Answering your enquiry or information request | Your consent when you submit the form | 1 year from last contact |
| Emailing you the result of the free test | Your consent, given by ticking the box | Until withdrawn, 2 years maximum |
| Providing the subscribed service and panel access | Performance of the contract | For the life of the contract |
| Invoicing, accounting and tax obligations | Legal obligation | 6 years commercial, 4 years tax |
| Sending service and sector updates | Your consent, separate optional box | Until you unsubscribe |
| Security, abuse prevention and access logging | Legitimate interest in protecting the service | 12 months |
We do not send marketing to anyone who has not asked for it. The updates box is separate, never pre-ticked, and every email carries a one-click unsubscribe link that works.
4. Who else sees your data
Only those needed to run the service, always under an Article 28 processor agreement:
- The hosting and infrastructure provider, with servers in the European Union.
- The outbound email provider, to deliver alerts and reports.
- The payment gateway, which handles card details directly; we never see or store them.
- The accountancy firm, for invoicing.
We do not sell or share data with third parties for their advertising. We make no international transfers outside the European Economic Area; if one ever became unavoidable it would be made under the Chapter V safeguards and stated on this page.
5. Automated decisions
The test and the panel calculate a result from what you answer or enter. That calculation is indicative and produces no legal effect on you in itself: it grants nothing, denies nothing, and is not used to build profiles with consequences.
6. Your rights
At any time and free of charge you can ask us to give you access to your data, correct it if inaccurate, erase it, restrict its processing, object to it, and receive a portable copy. You can also withdraw any consent you gave, without affecting what was done beforehand.
Write to privacy@dossalis.com saying which right you want to exercise. We answer within one month. If the request is complex we may extend it by two further months, telling you first.
If you believe we handled your request poorly, you can complain to the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid, www.aepd.es). We would rather you gave us the chance to fix it first.
7. Security
The connection is encrypted end to end. Passwords, where they exist, are stored with resistant derivation functions; panel access uses a single-use token link, precisely so you do not have to manage one more password. Database access is limited to the people who need it and is logged. Backups run daily with thirty-day retention.
8. Minors
The service is aimed at companies and professionals. It is not designed for under-fourteens and we do not knowingly collect data from them.
9. Changes
If we change anything material we will email you before it takes effect. The date at the top always shows the version in force.