Privacy notice

Controller

Controller

Danny Andreas Johannes Badenbroek, natural person, sole trader (Spanish autónomo), using the commercial designation DABA Group

Address

Carrer Rei Jaume I 26D, Polop, Alicante, Spain

NIE (tax identification number)

Y4592401M

Contact for privacy matters

hello@theworldsby.com

What this site processes

This site is informational. It has no user accounts, forms, comments, shop or payments, and it uses no cookies, local storage, analytics tools or advertising. All pictures, fonts and scripts are served from the site itself: no third-party resources are loaded.

Only the technical data that any connection to a website produces is processed and, if you write to us, the content of your message. This description has been checked against the code and the configuration of the site.

Technical connection data and hosting

Data

IP address, date and time, the page requested, the result of the request, browser and system (user agent), referring page and the languages your browser sends.

Purpose

Delivering the site, keeping it secure and stable and detecting abuse.

Legal basis

The controller’s legitimate interest in running and securing the site (article 6(1)(f) GDPR).

Retention

The runtime logs that Vercel makes available to the controller are kept, according to Vercel’s documentation, for between one hour and thirty days depending on the plan and options taken. Vercel may also keep connection data for the minimum period needed to meet its legal and contractual obligations, according to its privacy policy. The controller does not use this data for analytics or profiling.

Recipients

Vercel Inc. (440 N Barranca Avenue #4133, Covina, CA 91723, United States), hosting and content delivery provider, acting as processor.

International transfers

Vercel Inc. is a US company and its primary processing facilities are in the United States. According to its privacy policy, Vercel is certified under the EU-U.S. Data Privacy Framework, and its data processing addendum (DPA), which is part of the customer agreement, includes the European Commission’s standard contractual clauses (Decision 2021/914).

Obligation to provide the data

It is technically necessary for the site to be shown. It is not required by law or by contract.

Contact by e-mail

Data

Your e-mail address, the content of your message and anything else you choose to provide.

Purpose

Answering your enquiry.

Legal basis

If your enquiry concerns a possible contract, taking steps at your request before entering into it (article 6(1)(b) GDPR); otherwise the legitimate interest in replying (article 6(1)(f) GDPR).

Retention

As long as needed to deal with the enquiry and, afterwards, for the legal periods that apply.

Recipients

The controller’s e-mail service provider: according to the domain’s MX records, MijnDomein (Mijndomein Hosting B.V., the Netherlands), within the European Economic Area.

Obligation to provide the data

Writing to us is voluntary; without your contact details we cannot reply.

Language

The language of the site is determined only by the web address (no prefix for English, /nl for Dutch, /es for Spanish). No preference is stored on your device, no cookie is used and the site does not redirect you according to your browser language.

Cookies and similar technologies

This site uses no cookies, local storage (localStorage or sessionStorage), device identifiers, pixels or analytics. That is why no cookie banner is shown. If this changes, this notice will be updated first and your consent will be asked where the law requires it (article 22(2) Spanish LSSI-CE).

Links to other sites

The site links to Worlds by Socials (worldsbysocials.com), which runs on its own website and has its own information about data processing. This notice does not cover it.

Your rights

You can exercise your rights of access, rectification, erasure, restriction of processing, objection and data portability by writing to hello@theworldsby.com. We may ask you to prove your identity. We will answer within one month (article 12(3) GDPR), extendable in the cases the regulation provides for.

No automated decisions are taken and no profiles are built from your data.

If you believe the processing does not comply with the rules, you can lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) or with the supervisory authority of your country of residence.

Security and communications

The site is served over HTTPS with security headers (HSTS, a content security policy and protection against embedding in other sites). No technical measure guarantees absolute security.

Ordinary e-mail is not end-to-end encrypted: do not send sensitive data that way.

Changes

If the processing changes, for example when accounts or new products open, this notice will be updated before the change applies. The date of the last update is at the top of this document.