1. Data Controller
In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR), and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), users are informed of the following:

• Controller: Potion Code S.L.

• Tax ID (CIF/NIF): B72764517

• Address: Calle Violetas, 10, 28250 Torrelodones, Madrid

• Contact Email: info@potioncode.com

2. Purpose of Data Processing
We process the personal data provided by users for the following purposes:

• To manage inquiries or requests received through the website.

• To provide the services contracted by the user.

• To send commercial communications, provided the user has expressly authorized this.

• To comply with our legal obligations.

3. Data Retention
Personal data will be retained as long as there is a commercial or contractual relationship with the user and for the legally established periods thereafter. If the data is collected for promotional purposes, it will be kept until the user withdraws their consent.

4. Legal Basis
The legal basis for processing your data is:

• The user’s explicit consent.

• The performance of a contract or the implementation of pre-contractual measures.

• Compliance with legal obligations.

5. Data Recipients
Data will not be disclosed to third parties, except when legally required or necessary to provide the service (e.g., hosting providers, payment platforms, etc.). In such cases, the appropriate data processing agreements will be signed.

6. User Rights
Users may exercise their rights at any time by submitting a request along with a copy of their ID or another valid form of identification to the email address provided. These rights include:

• Right of access: To know what data is being processed.

• Right of rectification: To request correction of inaccurate or incomplete data.

• Right of erasure: To request deletion of data that is no longer necessary.

• Right to restriction of processing.

• Right to object.

• Right to data portability.

• Right to withdraw consent at any time.

Additionally, users have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if they believe their data is being processed in violation of applicable regulations.

7. Data Security
Potion Code S.L. applies the necessary technical and organizational measures to ensure the security of personal data and to prevent its alteration, loss, or unauthorized processing or access.

8. Changes to the Privacy Policy
Potion Code S.L. reserves the right to modify this policy to reflect legislative or jurisprudential updates. Any changes will be promptly communicated on this page.