← Back

Data Protection
(GDPR)

1. Applicable Legal Framework

Booster Bundle complies with:

• GDPR (General Data Protection Regulation EU 2016/679)
• LOPD-GDD (Spanish Organic Law on Data Protection)
• ePrivacy Directive (Cookie Law)

2. Data Controller

Name: Nestor Reyes
NIE: Z2377517N
Address: Calle Bravo Murillo, 91, 28003 Madrid, Spain
Contact Email: legal@boosterbundle.digital

3. Legal Basis for Processing

We process your data under the following legal bases:

• Contract: to execute your subscription/purchase
• Consent: for marketing emails (prior consent required)
• Legal Obligation: to comply with taxes and audit requirements
• Legitimate Interest: to improve security and experience

4. Data Categories

• Identification: name, email, phone
• Payment Data: processed by third parties (NOT stored by Booster Bundle)
• Navigation Data: IP, cookies, access history
• Communication Data: emails, support messages

5. Data Subject Rights

Under GDPR and Spanish law, you have irrevocable rights:

Right of Access (Art. 15 GDPR)

Request a copy of your personal data. We will respond within 30 days at no cost.

Right of Rectification (Art. 16 GDPR)

Correct inaccurate or incomplete data immediately.

Right to Erasure / Right to Be Forgotten (Art. 17 GDPR)

Request deletion of your data. We will comply except for legal obligations (tax records, 6 years).

Right to Restrict Processing (Art. 18 GDPR)

Limit the use of your data while you dispute its accuracy.

Right to Data Portability (Art. 20 GDPR)

Receive your data in structured format (CSV, JSON) to transfer to another controller.

Right to Object (Art. 21 GDPR)

Refuse processing based on legitimate interest or for marketing.

6. Exercising Your Rights

To exercise any right, contact:

Email: legal@boosterbundle.digital
Requirements: Identify yourself with your name and registered email

We will respond within 30 calendar days (extendable to 90 days if complex). Service is free, except for excessive or clearly unfounded requests.

7. International Transfers

Booster Bundle operates in Spain/EU. If we transfer data outside the EU, we apply safeguards (standard contract clauses, adequacy decisions).

8. Data Processors

We share data with certified processors:

• Shopify — payment processing
• GoHighLevel — CRM and automation
• GitHub Pages — site hosting
• Email Providers — confirmations

All have signed Data Processing Agreements (DPA) compliant with GDPR.

9. Data Breaches

In case of unauthorized access to your data, we will notify authorities and you within 72 hours (if alert required).

10. Impact Assessment (DPIA)

We conduct impact assessments for high-risk processing. We will consult the Data Protection Authority if necessary.

11. Complaints

If you believe your rights have been violated, you may file a complaint with the Data Protection Authority:

AEPD (Spain)
Calle Jorge Juan, 6, 28001 Madrid
www.aepd.es | reclamaciones@aepd.es