Privacy policy
The original of this document is in Spanish. This version is a courtesy translation; in case of discrepancy, the Spanish one prevails. Spanish law applies.
This policy explains what personal data viralteca.com processes, what for, on what legal basis and what you can do about it. It is written in accordance with Reglamento (UE) 2016/679 (GDPR) and Ley Orgánica 3/2018 (LOPDGDD), the Spanish data protection act.
1. Data controller
| Controller | Viralteca SL |
|---|---|
| hola@viralteca.com |
Given the volume and the type of data, Viralteca is not required to appoint a data protection officer. For any privacy question, the email address above is the channel.
2. Browsing the rankings requires no data from you
You can use the whole public part of Viralteca without registering, without identifying yourself and without being asked for any personal data. The site does not install cookies and uses no third-party analytics or advertising tools that follow you. We do keep a visit count of our own — without cookies and without storing your IP — which is explained in section 3.b and whose results are published openly in the statistics. You can check all of it in the cookie policy.
3. What is processed and why
a) Technical server logs
The site is served from Cloudflare, which automatically records data such as the IP address, the date and time of the request, the page requested, the browser and the approximate country. They serve to make the site work, to protect it from attacks and abuse and to count visits in aggregate.
Legal basis: the controller’s legitimate interest in maintaining the security and the operation of the service (art. 6(1)(f) GDPR). Retention: Cloudflare’s log retention period, which does not exceed thirty days.
b) Visit counting
To know how many people use the site, page views, visitors and the domain they arrive from are counted. No cookie is installed and your device is not accessed. To count visitors without identifying you, a fingerprint of the day is calculated: an irreversible hash (SHA-256) of your IP address and your browser, mixed with a random salt that is generated each day and destroyed two days later. The IP address is never stored: it goes into the calculation and is discarded. Because the salt expires, one day’s fingerprint cannot be matched with another day’s, so it is not possible to reconstruct anyone’s path or to know whether they have come back. Of the referring link only the domain is kept, never the full address. We also note the country, the type of device and the browser — “Spain”, “mobile”, “Chrome” — broad categories that come in the request itself and that millions of people share.
Legal basis: the controller’s legitimate interest in knowing the aggregate use of the service (art. 6(1)(f) GDPR), processing of minimal impact since it allows neither identification nor tracking. Retention: the daily fingerprints and the aggregate counters are kept for as long as the service is active; the salt that would allow them to be recalculated is deleted after two days. The results are published in aggregate in the statistics.
c) Emails you send us
If you write to the contact address or use the suggestion box at the bottom of the page, the data you include —the message and, if you leave it, your email— is processed in order to read it and, where appropriate, answer you. The suggestion box stores nothing on the website: the message reaches us by email, sent through Cloudflare. Your email is optional and is only used to reply to you.
Legal basis: your own request (art. 6(1)(b) GDPR). Retention: the time needed to reply and, afterwards, the time required by any resulting liabilities.
d) Featured videos and bids
To book a featured placement we process the name or identifier you provide, the email address, the video link and the transaction data. Card details never pass through Viralteca: payment takes place entirely in Stripe’s environment, and Stripe acts as an independent controller for that data.
Legal basis: performance of the contract (art. 6(1)(b) GDPR) and compliance with tax and accounting obligations (art. 6(1)(c) GDPR). Retention: for as long as the relationship lasts and, afterwards, the statutory retention periods for invoices and receipts (six years under commercial law, four under tax law).
4. Who else sees this data
| Provider | What for | Where |
|---|---|---|
| Cloudflare | Hosting, distribution network and database | Database in the European Union (WEUR region); global network |
| Stripe | Collecting bid payments | Ireland and the United States |
| Google (YouTube) | Video thumbnails, served from their servers | Global |
| YouTube | Embedded player, only if you press play on a video page | Global |
Beyond this, no data is passed on to anyone, except where the law requires it. It is not sold or shared with advertisers.
International transfers
Cloudflare and Stripe may process data outside the European Economic Area. Both cover those transfers with the standard contractual clauses approved by the European Commission and with the EU-US Data Privacy Framework. The Viralteca database is hosted in the European Union.
YouTube thumbnails
The video images are loaded from Google’s servers, which receive your IP address when they do. It is the only third-party call the page makes on its own.
Video player
Every video has its own page on viralteca.com, and the player does not load until you press play: until that moment you only see a thumbnail and there is no communication with YouTube. When you press it, YouTube receives your IP address and installs its own cookies, as an independent controller. The notice appears next to the button so that the decision is yours and is an informed one. We explain it in detail in the cookie policy.
5. Your rights
You can request access to your data, its rectification or erasure, the restriction of or objection to processing, and portability. Just write to hola@viralteca.com stating which right you are exercising. The answer comes within one month.
If you believe your data has not been handled properly, you can complain to the Agencia Española de Protección de Datos, the Spanish data protection authority (aepd.es), C/ Jorge Juan 6, 28001 Madrid.
6. Minors
Viralteca is not aimed at people under fourteen and does not knowingly collect their data. If we find that such data has been provided, it is deleted.
7. Changes
If this policy changes, the new version is published on this same page with its update date.
