Privacy policy

Information on the processing of personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018.

1. Data controller

• Identity: Rubén Sastre Rodríguez
• Tax ID (NIF): 52129410W
• Postal address: Calle Lago Enol 45, 28521 Rivas-Vaciamadrid, Madrid, Spain
• Email: hello@solidwaretools.com

2. Fundamental principle: minimum processing

SolidwareTools does not collect or store on its servers the data that users enter into the document generators. All PDF generation occurs exclusively in the user's browser, whichever product is used (EAA-Report, GPSRCheck, BrechaCheck, etc.): company data, questionnaire answers, product or service information being assessed, and controller identification are processed locally. When the tab is closed, that information disappears. SolidwareTools never has access to it.

3. Personal data that is processed

SolidwareTools processes personal data of the user only in the following cases:

3.1 Product purchase

When the user purchases a SolidwareTools product license, payment processing is carried out through Gumroad, Inc. (8 The Green, Suite 6132, Dover, DE 19901, United States), which acts as Merchant of Record. Gumroad collects directly from the user the data necessary to process the payment: name, email, billing address, country, and card or payment method details.

SolidwareTools receives from Gumroad, once the purchase is completed, only the minimum data necessary to deliver the product and provide support: buyer's name, email, and country, together with the transaction reference. SolidwareTools does not receive or store full payment card details.

For more information on data processing by Gumroad, see their privacy policy at gumroad.com/privacy.

3.2 Email communication

If the user sends an email to hello@solidwaretools.com (commercial enquiry, technical support, complaint, exercise of rights), SolidwareTools will process the data contained in the email (sender's address, name if provided, message content) for the sole purpose of responding to the enquiry.

4. Purpose of processing

• Performance of the purchase contract: delivery of the license, sending of the generator download link, technical support during the validity of the license, management of refunds for technical failure.
• Compliance with tax obligations: retention of billing data for the period legally required by Spanish tax legislation.
• Handling of enquiries and complaints: response to communications received at the contact email.

SolidwareTools does not process user data for its own or third-party advertising purposes, nor for profiling, nor for building commercial databases, nor does it transfer data to third parties for commercial purposes.

5. Legal basis for processing

• Performance of contract (Art. 6.1.b GDPR): for data derived from the purchase of the product and the provision of associated support.
• Compliance with a legal obligation (Art. 6.1.c GDPR): for the retention of billing data in accordance with Spanish tax legislation.
• Legitimate interest (Art. 6.1.f GDPR): for responding to non-contractual enquiries received at the contact email.

6. Retention period

• Transaction data (billing): the period legally required by Spanish tax legislation (currently 4 years for income tax purposes and 6 years for accounting books, under Article 30 of the Spanish Commercial Code).
• Technical support data linked to a purchase: for the duration of the license and support (30 days from activation) and, subsequently, for the period of limitation of actions arising from the contract (5 years in Spanish civil law, under Article 1964 of the Civil Code).
• Emails not linked to a purchase: until the purpose of the enquiry has been completed, with a maximum period of one year unless the user requests deletion earlier.

7. Recipients of the data

The user's personal data may be communicated to the following recipients, exclusively for the stated purpose:

• Gumroad, Inc. as Merchant of Record and payment processor. Gumroad is subject to the EU-U.S. Data Privacy Framework for international data transfers.
• Spanish Tax Administration (AEAT) in compliance with applicable tax obligations.
• Owner's tax advisor, exclusively for managing the controller's accounting and tax obligations.

8. User rights

Any person has the right to obtain confirmation as to whether SolidwareTools is processing personal data concerning them. In particular, the user has the following rights:

• Right of access: to know what personal data is being processed.
• Right to rectification: to correct inaccurate or incomplete data.
• Right to erasure: to request the deletion of data when it is no longer necessary.
• Right to restriction of processing: in the cases provided for in Article 18 of the GDPR.
• Right to portability: to receive the data in a structured and commonly used format.
• Right to object: to object to processing based on legitimate interest.

The user can exercise any of these rights by sending an email to hello@solidwaretools.com. A response will be provided within a maximum period of one month from receipt of the request.

9. Complaints to the supervisory authority

If the user considers that the processing of their personal data does not comply with the regulations, they have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD):

• Address: C/ Jorge Juan, 6, 28001 Madrid, Spain
• Website: www.aepd.es
• Electronic office: sedeagpd.gob.es

10. Modifications

SolidwareTools reserves the right to modify this Privacy Policy to adapt it to legislative changes, case law, or to its own activity. The current version will always be the one published on this page.

Last updated: 13 April 2026