GDPR at Blanca's Builder
How we operationalize GDPR rights and obligations.
This page summarises how we apply the EU GDPR and UK GDPR in practice. The formal GDPR notice lives at /legal/gdpr.
Last updated: 2026-06-28
This page is maintained by Blanca's IT Professional SL to answer common security, privacy and trust questions about Blanca's Builder.
This page is app-owned editable content. It is not an independent audit or certification.
Security is a shared responsibility between Blanca's IT Professional SL, the platforms we run on (Cloudflare, Supabase) and you as the account owner.
Roles
Blanca's IT Professional SL is the data controller for account and product usage data. We act as data processor for the content you upload or generate inside your projects.
Lawful bases
We rely on contract (to provide the service), legitimate interest (to keep it secure and improve it) and consent (for optional analytics and marketing emails).
Data subject requests
Send requests to info@blancas-it.com from the email linked to your account. We respond within 30 days. We may ask for additional verification before acting on a request.
Data Processing Addendum
We offer a standard Data Processing Addendum to business customers on request. Contact info@blancas-it.com to receive a signed copy.
Supervisory authority
Our lead supervisory authority is the Agencia Española de Protección de Datos (AEPD) in Spain. You always have the right to lodge a complaint with your own national authority.
Canonical: https://blancasbuilder.com/trust/gdpr · Blanca's Builder