Last Updated: November 21, 2025

Privacy Policy

At abreak.io, we are committed to protecting your privacy and ensuring the security of your personal information in accordance with GDPR and Spanish data protection laws.

Data Controller Information

Company Name:

abreak.io

Registered Office:

Vigo, Galicia, Spain

Applicable Law:

This Privacy Policy is governed by the General Data Protection Regulation (GDPR - EU 2016/679), the Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), and the Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE).

1. Introduction

abreak.io ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website abreak.io and use our services.

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the site or use our services.

2. Information We Collect

2.1 Personal Data

We may collect the following types of personal information:

  • Identity Data: Name, username, or similar identifier
  • Contact Data: Email address, telephone number, billing address, and delivery address
  • Financial Data: Payment card details (processed securely through third-party payment processors)
  • Transaction Data: Details about payments and services purchased from us
  • Profile Data: Username and password, purchases or orders, preferences, feedback, and survey responses

2.2 Technical Data

  • Internet Protocol (IP) address
  • Browser type and version
  • Time zone setting and location
  • Browser plug-in types and versions
  • Operating system and platform
  • Other technology on the devices you use to access our website

2.3 Usage Data

  • Information about how you use our website, products, and services
  • Pages viewed, time spent on pages, and navigation paths
  • Search queries and interaction with our services

3. How We Collect Information

Direct Interactions

You provide data by filling in forms, corresponding with us by post, phone, email or otherwise, including when you:

  • Request our services or products
  • Create an account
  • Subscribe to our publications
  • Request marketing materials
  • Give us feedback

Automated Technologies

As you interact with our website, we automatically collect Technical Data about your equipment, browsing actions, and patterns through:

  • Cookies and similar technologies
  • Server logs
  • Web analytics tools

Third Parties or Publicly Available Sources

We may receive personal data about you from various third parties, including:

  • Analytics providers
  • Advertising networks
  • Search information providers

Social Media Interactions

When you interact with us through social media platforms, we may collect:

  • Profile information you make public
  • Interaction data with our content

4. How We Use Your Information

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

To Provide and Maintain Our Services

Legal basis: Performance of a contract with you

  • Deliver products and services to you
  • Manage your account and registration
  • Process payments and transactions
  • Provide customer support

For Business Operations and Improvement

Legal basis: Legitimate interests

  • Improve and optimize our website and services
  • Understand how users interact with our services
  • Conduct data analysis and testing
  • Develop new products and services

For Marketing and Communications

Legal basis: Your consent or legitimate interests

  • Send you promotional materials and offers (with your consent)
  • Communicate with you about our services
  • Send you updates and newsletters

You can opt-out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.

For Legal and Security Purposes

Legal basis: Legal obligation or legitimate interests

  • Comply with legal obligations and regulations
  • Prevent fraud and ensure security
  • Protect our rights and property
  • Resolve disputes and enforce our agreements

5. Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD), you have the following rights regarding your personal data:

Right to Access

You have the right to request copies of your personal data and information about how we process it.

Right to Rectification

You have the right to request correction of any incomplete or inaccurate data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data under certain conditions ("right to be forgotten").

Right to Restrict Processing

You have the right to request restriction of processing of your personal data under certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and transfer it to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where we rely on consent to process your data, you have the right to withdraw that consent at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe your rights have been violated.

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

[email protected]

We will respond to your request within one month. In some cases, this may be extended by two additional months where necessary, taking into account the complexity and number of requests.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and understand where our visitors are coming from. A cookie is a small file placed on your device that enables various features and functionality.

Types of Cookies We Use:

Essential Cookies

These cookies are necessary for the website to function properly. They enable basic functions like page navigation, access to secure areas, and form submission. The website cannot function properly without these cookies.

Analytics and Performance Cookies

These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use this information to improve our website's performance and user experience.

Functionality Cookies

These cookies allow our website to remember choices you make (such as your language preference or region) and provide enhanced, more personalized features.

Marketing and Advertising Cookies

These cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for individual users, making them more valuable for publishers and third-party advertisers.

Managing Your Cookie Preferences

You can control and manage cookies in various ways. Please note that removing or blocking cookies can impact your user experience and some features may no longer be fully operational.

  • Browser Settings: Most browsers allow you to refuse or accept cookies through their settings
  • Third-Party Tools: You can opt-out of third-party cookies through industry opt-out platforms
  • Cookie Banner: Use our cookie consent banner to manage your preferences when you first visit our site

7. Data Sharing and Disclosure

We may share your personal data with the following categories of recipients:

Service Providers and Partners

We may share your data with third-party service providers who perform services on our behalf, including:

  • Payment processing and fraud prevention
  • Cloud hosting and storage services
  • Email delivery and marketing platforms
  • Analytics and data analysis
  • Customer support and communication tools

These service providers are contractually obligated to protect your data and only use it for the purposes we specify.

Legal Authorities

We may disclose your personal data to law enforcement, regulatory authorities, courts, or other public authorities if required by law or if such disclosure is necessary to:

  • Comply with legal obligations
  • Protect our rights, property, or safety
  • Prevent fraud or security threats
  • Enforce our terms and conditions

Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal data may be transferred to the successor entity. We will notify you of any such change and the choices you may have regarding your personal data.

With Your Consent

We may share your personal data with other third parties when you have given us explicit consent to do so for a specific purpose.

International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). When we transfer your personal data outside the EEA, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses approved by the European Commission
  • Transfers to countries with adequacy decisions from the European Commission
  • Other legally approved transfer mechanisms

8. Data Security and Retention

Data Security Measures

We have implemented appropriate technical and organizational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

Encryption

Data encryption in transit and at rest

Access Controls

Strict access limitations to authorized personnel

Secure Infrastructure

Protected servers and network security

Monitoring

Regular security audits and monitoring

Important: While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to enhance our security measures.

Data Retention Periods

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

Account Data

Retained for the duration of your account plus a reasonable period afterward for legal and accounting purposes (typically 6 years in accordance with Spanish commercial law).

Transaction Records

Retained for 6 years to comply with Spanish tax and accounting regulations.

Marketing Data

Retained until you withdraw consent or request deletion, whichever comes first.

Technical and Usage Data

Typically retained for 2 years, unless a longer retention period is required for security or legal purposes.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your data, and applicable legal requirements.

9. Children's Privacy

Protection of Minors

Our services are not intended for children under the age of 16. We do not knowingly collect personal data from children under 16 without parental consent in accordance with GDPR requirements.

If you are under 16, please do not provide any personal information through our website or services.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete that information as quickly as possible.

For concerns about children's privacy, contact us at: [email protected]

10. Third-Party Links and Services

External Websites

Our website may contain links to third-party websites, applications, or services that are not operated by us. When you click on these links, you will be directed to that third party's site.

Please note: We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We strongly advise you to review the privacy policy of every site you visit.

Third-Party Service Integrations

We may integrate third-party services and tools into our platform to enhance functionality. These may include:

  • Analytics platforms (e.g., Google Analytics)
  • Social media plugins and widgets
  • Payment processors
  • Communication tools (e.g., live chat, email marketing)
  • Content delivery networks (CDNs)

Each of these third-party services may collect and process data according to their own privacy policies. We encourage you to review their respective privacy policies to understand how they handle your information.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

Email Notification

Sending an email to registered users

Website Notice

Posting a prominent notice on our website

Updated Date

Revising the "Last Updated" date at the top

In-App Notification

Displaying a notification when you log in

Your Responsibility

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after any changes to this Privacy Policy constitutes your acceptance of such changes.

Effective Date: Changes to this Privacy Policy will become effective when posted on this page, unless otherwise specified. Material changes may require a 30-day notice period before becoming effective.

12. Contact Us and Supervisory Authority

Contact Our Data Protection Team

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

Postal Address

abreak.io
Vigo, Galicia
Spain

Data Protection Officer

For specific data protection inquiries, you can reach our Data Protection Officer at: [email protected]

Supervisory Authority

If you have concerns about how we handle your personal data that we haven't been able to resolve, you have the right to lodge a complaint with the relevant supervisory authority:

Spanish Data Protection Agency (AEPD)

Name: Agencia Española de Protección de Datos

Address: C/ Jorge Juan, 6, 28001 Madrid, Spain

Phone: +34 901 100 099 / +34 912 663 517

Website: www.aepd.es

Online Complaint: sedeagpd.gob.es

You also have the right to lodge a complaint with the supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

Thank You for Reading Our Privacy Policy

We are committed to protecting your privacy and being transparent about our data practices. Your trust is important to us, and we continuously work to ensure your personal information is handled with the highest level of care and security.

GDPR Compliant

Secure & Encrypted

Your Rights Protected

Last Updated: November 21, 2025 | Effective Date: November 21, 2025