Privacy policy
Last updated: October 1, 2026
Courtesy translation. In case of discrepancy, the Spanish version prevails.
This policy explains what personal data we process when you use Taller de Hardware, why we use it and what rights you have, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD).
1. Data controller
- Controller: Adrián Mira Sánchez
- Tax ID (NIF): 49907032E
- Address: Calle Fátima 5 2ºF
- Privacy contact: mirasanchezadrian@gmail.com
2. What data we process
| When | Data |
|---|---|
| When you create your account | Email, username, display name (optional) and password. The password is stored with a one-way hash: nobody, not even us, can read it. |
| When you buy | Games purchased, amount, date, payment ID and the email of the PayPal account you pay with. We never receive or store your card details: payments are handled by PayPal. |
| When you download | Date, version downloaded and IP address, to protect the files against fraudulent use. |
| When you write a review | The text of your review and your display name (or your username if you haven’t set one), which are shown publicly on the game page. |
| When you request a refund | The reason and the message you write to us. |
| When you browse | Essential technical data (technical cookies and server logs). See the Cookie policy. |
3. Why we use it and on what legal basis
- To manage your account, purchases, downloads, updates, customer support and refunds. Basis: performance of the contract you accept when you sign up and buy (art. 6.1.b GDPR).
- To meet accounting, tax and consumer-law obligations, such as keeping sales records. Basis: legal obligation (art. 6.1.c GDPR).
- To protect the website and prevent fraud: limiting login attempts, protecting game files and detecting abuse. Basis: legitimate interest in keeping the service secure (art. 6.1.f GDPR).
We only send emails related to your account and purchases (receipts, password recovery and refund replies). We do not send advertising or build marketing profiles.
4. Who we share data with
- PayPal (Europe) S.à r.l. et Cie, S.C.A., which processes payments as an independent controller under its own privacy policy.
- Hosting provider (Nominalia), which stores the website and its data on our behalf as a data processor.
- Public authorities, such as the Spanish Tax Agency, when required by law.
We do not sell or share your data with third parties for commercial purposes.
5. International transfers
We do not transfer data outside the European Economic Area. If PayPal does so to process a payment, it is covered by the safeguards described in its own privacy policy.
6. How long we keep it
- Account: while you keep it. If you ask us to delete it, we will, except for data we must keep by law.
- Purchases and refunds: 6 years from the sale (art. 30 of the Spanish Commercial Code) and as required by tax law.
- Download IP addresses: automatically deleted after 12 months.
- Login sessions: expire after 30 days.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time by writing to mirasanchezadrian@gmail.com from your account email and stating which right you want to exercise. We will reply within one month. You can also change your email and password yourself in Your account.
If you believe we have not handled your request properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Minors
You must be at least 14 years old to create an account (art. 7 LOPDGDD). Children under 14 need the consent of their parents or guardians, who must make the purchase.
9. Security
The website uses an encrypted connection (HTTPS), passwords are stored hashed and game files can only be downloaded from an account that has bought them. We apply reasonable technical and organisational measures to protect your data.
10. Changes to this policy
If we make significant changes, we will show them on the website with the new update date.