This policy explains what personal data Plyb processes when you use the website plyb.es, the Plyb customer area and the product Plyb TV, what it is used for and what rights you have.
1. Who is the controller
Plyb is the trade name under which Pablo Barranco Céspedes operates, in Málaga (Spain). He is the controller of your data. For any privacy matter you can write to soporte@plyb.es.
2. Who this applies to
The customer area is a service for companies, professionals and public bodies. The personal data we process belongs to the people acting on behalf of those organisations: those who sign in to the portal and their contact persons. We also process the data of anyone who writes to us through the forms on this website.
3. What data we process and where it comes from
| Data | Where it comes from |
|---|---|
| Identification and access: first name, last name and email address | From your Google or Microsoft account, when you sign in to the customer area with it. We neither receive nor store your password |
| Organisation data: legal name, tax ID, address, contact email and phone, logo | Entered by whoever registers or edits the organisation |
| Orders and invoices: what is purchased, amounts, payment status and invoices issued | Generated when you purchase |
| Licenses and installations: which licenses your organisation holds, which Plyb TV installation they are activated on, that installation's name, its version and the date of its last connection | Sent by your Plyb TV installation when it connects to Plyb |
| Activity log: which action each person took and when, with the IP address and browser used | Recorded as the customer area is used |
| Communications: the emails we send you (recipient, subject and date) and whatever you write to us | When using the customer area or contacting us |
| Website forms: the data you enter when requesting a demo or contacting us | Entered by you when you submit the form |
| Website browsing: pages visited, referrer and technical device data | Google Analytics, only if you accept analytics cookies |
Plyb TV is installed on the customer's own servers. Plyb does not receive the content being displayed or any data about the people watching it: the only thing the installation sends to Plyb is what is needed to activate and renew licenses.
We do not process special categories of data, and we do not make automated decisions with legal effects on individuals.
4. What we use it for and on what legal basis
| Purpose | Legal basis |
|---|---|
| Giving you access to the customer area and managing your organisation, its members and invitations | Performance of the contract with your organisation |
| Issuing, activating, renewing, transferring and revoking licenses | Performance of the contract |
| Processing orders, issuing invoices and managing payments | Performance of the contract and legal obligations (tax and commercial law) |
| Sending you service notices: orders, payments, licenses about to expire, renewals, invitations | Performance of the contract |
| Keeping the activity log, detecting misuse of licenses and protecting the service | Legitimate interest in security and in being able to evidence what happened |
| Handling your enquiries and support requests | Performance of the contract or your request |
| Replying to the website's contact and demo forms | Your consent, given when you submit them |
| Knowing where the website's traffic comes from | Your consent, given when you accept analytics cookies |
We do not use your data for advertising, and we do not send commercial emails without your consent. Service notices are not advertising.
5. How long we keep it
| Data | Period |
|---|---|
| User account and organisation data | For as long as the relationship with your organisation lasts and, afterwards, for the time needed to address possible liabilities |
| Invoices and accounting records | 6 years, plus the applicable tax periods |
| Activity log | 5 years |
| Customer area session | 12 hours at most; 30 minutes without activity |
| Invitation and license transfer links | 7 and 30 days, respectively |
| Content of emails sent | Deleted once sent; the recipient, subject and date are kept |
| Backups | Up to 6 months |
| Website forms | 1 year from the last communication |
6. Who we share it with
We do not sell your data. We only disclose it to:
- Other organisations, when you ask us to: whoever you invite to your organisation, or transfer licenses to, receives your name and your organisation's name.
- Public authorities and courts, when the law requires it (for example, the tax authorities).
- Providers that deliver services to us and process data on our behalf:
| Provider | What for |
|---|---|
| Cloud server provider | Hosting the customer area |
| Email provider for the plyb.es domain | Sending and receiving email |
| Google (Google Drive) | Storing backups, encrypted: Google cannot read their content |
| Google (Google Analytics) | Website analytics, only with your consent |
| Cloudflare | Hosting and protecting the plyb.es website and handling its forms |
Google and Microsoft act as independent controllers when you sign in with your account: their own privacy policies apply.
7. International transfers
Some of these providers may process data outside the European Economic Area. In those cases the transfer relies on an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) or on standard contractual clauses. Backups leave our servers already encrypted.
8. Cookies and storage in your browser
- On this website (plyb.es) we use Google Analytics to see where traffic comes from. Its cookies are only enabled if you accept them in the cookie notice; if you reject them, they are not set. Your choice is stored in your browser and you can change it by clearing the site's data. Cloudflare may use technical cookies to protect the site against abuse.
- In the customer area there are only technical cookies, required for it to work: the session cookie, the one protecting against forged requests and those used for signing in. There are no advertising or analytics cookies.
9. How we protect the data
Among other measures: encrypted connections (HTTPS), sign-in delegated to Google and Microsoft with no passwords stored, strict separation of each organisation's data, a log of the actions taken, encrypted backups kept off the server, and access restricted to those who need the data to provide the service.
10. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent you have given, by writing to soporte@plyb.es and stating which right you are exercising. We may ask you to prove your identity. We reply within one month.
If your data was entered by your organisation (for example, as a contact person), you can also contact them.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD).
11. Changes to this policy
If we make a relevant change to this policy, we will announce it in the customer area or by email before it applies. The date of the last update is shown at the top.
This is a translation of the Spanish version, which prevails in case of discrepancy.