Privacy and cookie policy

Data controller

Owner

Pau Romaní

Address

Passeig Mare de Déu del Coll 70, 08023 Barcelona, Spain

NIF

23928922K

Email

promani.webs@gmail.com

Summary

If you write to us

When you write to us using the contact form, we process your name, your email address, the reason, what you tell us and, depending on the reason, the link you are reporting or the right you wish to exercise, only to reply to you and deal with your request. The legal basis is our legitimate interest in assisting you and, if you ask to exercise a right, our legal obligation to reply to you. Messages reach us by email and their text is not stored on the website, which only keeps, for one year, a log of the emails it sends (address and subject). In our mailbox we keep them for as long as needed to assist you and, after that, for up to one year in case we need to show how we did so.

If you write to a business from its listing

Each listing has a form for writing to the business. Through it we process your name, your email address, the subject and your message in order to pass them on to the business: if the business has given us a contact email address, the message goes directly to that address and from then on the business handles it; if not, it reaches us. The legal basis is your own request. The message is not stored on the website.

If you ask to add or change your business

With the “Add your business” form we process the business details you send us (name, address, phone number, website, opening hours, description, photos, links, the link to its Google profile, which we check to complete the request, and your notes), the reviews you choose or add with the Featured plan and your email address, to review the request, publish the listing if we accept it and communicate with you. In those emails we also tell you about the benefits for businesses. The legal basis is your own request. The business details are published on the website once accepted; your email address is not published, nor is the contact email you give us with the Featured plan: it receives the messages that visitors send you from your listing. We keep accepted requests while the listing exists (and at least one year after you sent them) and rejected ones for one year after you sent them.

To manage your listing (correct or remove it), you enter your email address on your business management page: we compare it with the published details of the listing to know whether it is yours, without sending any code, and we store it with your request, the date and your IP address. We send the acknowledgement to that email address.

If you subscribe to the Featured plan

To manage the subscription, we process the subscription and billing details (name or company name, address, tax number, email address, plan and payments). Payments are processed by the payment providers (Stripe, Inc. (United States), PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg)) on their own behalf, as controllers of that data: we do not see or store your card details. The legal basis is the contract, and we keep invoices and billing details for as long as tax law requires.

Data of the businesses in the directory

This directory publishes information about businesses and professionals: name, address, phone number, website, opening hours, photos, category, rating and reviews. We obtain it from publicly available sources, mainly the profiles that the businesses themselves publish on Google Maps, and from what the businesses send us. When the business is an individual (a professional or a sole trader), this data is personal data.

• Purpose: to let the public find and compare businesses in United States.
• Legal basis: our legitimate interest, and that of the public, in providing and receiving information about businesses that have already made themselves publicly known. We only publish business details, the same ones the business has made public so that people can find it.
• Retention: while the business remains active or until it asks us to remove it.
• Your rights: if your business appears here, you can correct its details, object to its publication or ask us to remove it at any time from your business management page, giving a brief reason. When we remove a listing, we record it, including in the service of the website software provider, so that it is not published again.

The business descriptions are written with the help of artificial intelligence services, to which we send the public data of the business and the text of its reviews; we do not send them any data about website visitors.

As we do not always have a way to contact each business, and contacting all of them would involve a disproportionate effort, we make this information available to everyone here (Article 14(5)(b) of Regulation (EU) 2016/679).

Reviews and their authors

The reviews come mainly from Google Maps, with the name and photo their author chose to display there; the photo is loaded from Google's servers. Businesses on the Featured plan can add reviews that they send us as being from their customers. Some may be shown automatically translated. The legal basis is the public's legitimate interest in knowing what other customers think. We do not check that their authors have been customers of the business. If you wrote a review and do not want it to appear here, write to us from the contact page choosing the reason “My personal data” and including the link to the page, and we will remove it; your name will be recorded, including in the service of the website software provider, so that the review is not published again.

Security and abuse prevention

To limit the number of submissions, we use a hash of your IP address for one hour at most. If you ask for a listing to be removed or changed from your business management page, we store your IP address with the request, so that we can show who asked for it. We also keep, in shortened form, the IP address of submissions that the system blocks as automated. The legal basis is our legitimate interest in protecting the website.

Maps

The maps in the listings are shown with data from OpenStreetMap (© OpenStreetMap contributors, ODbL licence); the map images are served by the OpenStreetMap Foundation (United Kingdom), which receives your IP address in order to send them.

Sorting by distance

If you ask to sort the businesses by distance or to see the ones near you, we use your location: the precise one from your browser, if you give it permission, or an approximate one based on your IP address. The approximate one is provided to us by the website software provider (directorai.org) and, if it does not respond, by the ipapi.co service (Kloudend, Inc., United States), to which your browser sends the request. We store it for 30 days, linked to a hash of your IP address, so as not to request it again; the precise one is not stored. To place on the map an address you type, or your position, we send the address or the coordinates, rounded, to Nominatim (OpenStreetMap Foundation) or to Photon (komoot GmbH, Germany), and we store the response for 30 days. The legal basis is your own request.

Website performance and delivery

To make the website load quickly, we keep copies of its pages on the server (LiteSpeed Cache). Fonts are served from the website itself.

The website software

This website runs on the DirectorAI software, from its provider (directorai.org). For its operation and support, the software sends the provider encrypted technical notices: to which address, with which subject and about which business or person the website sends an email, and subscriptions to the Featured plan, which the provider also uses to calculate its commission.

In addition, when we remove a listing or a review, we pass its details on to the provider (the name of the business or of the review's author and what the page showed) so that they are not published again on this website or on other websites that use the same software, and the provider works out the approximate location from your IP address for us when you ask to sort by distance. For these uses, the provider also makes its own decisions about that data.

Server logs

Like any website, the server records each visit (IP address, date and time, page, browser) for the period set by our hosting provider, for security and technical operation. The legal basis is our legitimate interest; we do not use these logs to identify you.

Who we share data with

We do not sell your data. The following providers process it on our behalf, only to provide their service to us:

• DirectorAI (directorai.org) (Spain): website software and technical notices
• Kloudend, Inc. (ipapi.co) (United States): approximate location and placing addresses on the map
• Google LLC (United States): photos of the businesses and of review authors
• OpenStreetMap Foundation (Nominatim) (United Kingdom): approximate location and placing addresses on the map
• OpenStreetMap Foundation (United Kingdom): maps
• PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg): collecting payment for paid plans
• komoot GmbH (Photon) (Germany): approximate location and placing addresses on the map
• Stripe, Inc. (United States): collecting payment for paid plans

We also disclose data to the authorities when the law requires us to.

International transfers

Some of these providers are located in countries other than yours, such as the United States or the United Kingdom. When data leaves the European Economic Area, transfers are based on adequacy decisions of the European Commission (United Kingdom, Switzerland and, for participating companies, the EU-U.S. Data Privacy Framework) or on the European Commission's standard contractual clauses.

How long we keep data

The retention periods for each processing activity are in the summary at the top. After those periods, we delete or anonymise the data, unless the law requires us to keep it longer.

Your rights

You can access your data, rectify it, erase it, restrict its processing, object to it, request its portability and withdraw your consent where you have given it.

To exercise them, write to us from the contact page (reason “My personal data”) or at promani.webs@gmail.com. We will reply within 45 days. It is free of charge, and we will only ask you for further details if we need to verify your identity.

Complaints

If you believe we have not handled your data properly, you can lodge a complaint with Agencia Española de Protección de Datos (AEPD) (https://www.aepd.es). We would appreciate it if you wrote to us first, in case we can resolve it.

Children

This directory is not aimed at children under 14 and we do not knowingly collect their data. If you are under that age, do not send us any personal data.

Automated decisions

The order of the businesses and their score out of 10 are calculated automatically by comparing each business with the others in its listing, based on its rating and number of reviews on Google and on whether it shows a website, opening hours and photos. We do not make automated decisions that produce legal effects concerning anyone or significantly affect them.

Cookies and similar technologies

Cookies are small files that a website stores in your browser; the browser's local storage works in a similar way. This website uses the following:

Technical ones are necessary for the website to work and do not require your consent.

Do Not Track

The website does not change how it works when your browser sends a “Do Not Track” signal.

Changes to this policy

We may update this policy when the website, the services it uses or the law changes. The version in force is always the one published here, with its date.