Privacy
Last updated:
paisanu is a free directory of sellers for Spanish speakers in Amsterdam. This page explains what data we keep, why, and for how long.
Who is responsible
[NOMBRE DEL RESPONSABLE]. For any question or request about your data, write to [EMAIL DE CONTACTO].
What we keep and why
- Your account: your email, which we use to sign you in. If you add them, also your name, photo, a short bio, where you are from and the languages you speak. Your profile isn't shown publicly for now.
- Your businesses: name, description, neighbourhood, service languages, products and services, photos and ways to contact you (WhatsApp, Instagram, phone, email or website). Once a business is published, anyone who visits its page sees all of this: that is what the directory is for.
- Reports and suggestions: the reason and the text you write. We don't keep who sent them.
- Searches: the search text, how many results there were, whether you used filters, and when. No IP address, account or session. They show us what people look for and what the directory is missing.
- Statistics: how many views and contact taps each business gets per day. Totals only, nothing about who visited. An owner's own visits aren't counted.
- Signing in: sign-in links expire after 15 minutes and sessions after 30 days.
- Technical data: we use your IP address to limit abuse (for example, too many searches in a row). Those counters live in memory for an hour at most and are never written to the database. Our hosting provider logs every request, with its IP address, to keep the service running and secure; the provider keeps those logs for its own periods.
Signing in with Google
You sign in with your Google account. Google confirms your email address to us and we use no other data from your Google account. We never see your password.
How long we keep it
- Your account, profile and businesses: until you delete your account.
- Deleting your account removes your profile, your sessions and sign-in links, and all your businesses with their contacts, products, photos, statistics and the reports they received. Photos are removed from storage right after; if that fails, the daily cleanup removes any file that is no longer used.
- Reports: as long as the reported business exists.
- Suggestions: we don't delete them automatically. They carry nothing about who sent them; if you wrote something personal in one and want it removed, write to us.
- Searches: 90 days. The daily cleanup deletes older ones.
- Daily statistics: as long as the business exists.
- Expired sign-in links and sessions: the daily cleanup deletes them.
Businesses we add ourselves
We add a business only with its owner's permission and remove it on request. To ask, write to [EMAIL DE CONTACTO].
Legal basis
- Your account and businesses: we need them to provide the service you ask for.
- Businesses we add ourselves: their owner's permission.
- Searches, statistics and technical data: our legitimate interest in keeping the directory working, improving it and preventing abuse.
Who else handles the data
- Vercel: hosts the website and the API and stores the photos (Vercel Blob). When it is turned on, Vercel Web Analytics counts site visits without cookies; we don't send it anything after the “?” in the address, such as searches.
- Neon: the database.
- Google: signing in.
Cookies
We use no tracking or advertising cookies. We only use these:
- the session cookie, which keeps you signed in (30 days);
- a temporary cookie while you sign in with Google (10 minutes) and another while you claim a business (1 hour);
- a cookie that remembers your language (1 year).
Your rights
You can ask us for a copy of your data, and to correct it, delete it, limit its use or object to it. You edit your profile and businesses yourself, and you can delete your account from your profile, under “Delete my account”. For anything else, write to [EMAIL DE CONTACTO].
If you think we handle your data badly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.