Privacy policy

The data controller is BertoProduction, NIF Y-4514/312-R, Cabo Blanco, 38627 Tenerife (Spain), info@biografo.net.

For anything concerning your data, write to info@biografo.net. We reply within thirty days, usually much sooner.

When you buy: name, email, billing address and, if your plan includes a printed book, a shipping address. These are needed to perform the contract and to meet tax obligations. Legal basis: Art. 6(1)(b) and 6(1)(c) GDPR.

When you write to us: name, email and the content of your message, so we can answer. Legal basis: Art. 6(1)(b), or our legitimate interest in handling enquiries, Art. 6(1)(f).

When you name the person to be interviewed: their name and contact details. We use these only to reach them and invite them to decide whether to take part. They receive their own notice and decide for themselves.

Technical browsing data: truncated IP address and browser type, for site security. We do not profile.

Payments are handled by Stripe Payments Europe Ltd. Your card number never passes through our servers and we never see it. From Stripe we receive only the transaction outcome and billing details.

Billing records: ten years, as tax law requires.

Account and project: up to two years after the book is delivered, then deleted, unless you activate the Living Archive.

Interview answers: up to two years after the book is delivered, then deleted. With the Living Archive they are kept for as long as you keep it active.

Contact messages: two years.

Consent records: ten years, because we must be able to demonstrate that valid consent was obtained.

Only the suppliers we need in order to deliver the service, each bound by an Art. 28 GDPR processor agreement: Stripe for payments, Google Cloud and OpenAI for language processing, our European hosting provider, and the printer for printing and shipping.

We do not sell your data and we do not pass it to third parties for marketing. Ever.

The current list of suppliers is available on request at info@biografo.net. We give thirty days’ notice before adding a new one.

Some AI providers are based in the United States. We have configured the service to keep that exposure to a minimum: text sent to the models is pseudonymised where possible, and our contracts require zero retention and prohibit using the data to train models.

Where a transfer does occur, it is covered by the Standard Contractual Clauses approved by the European Commission and, where applicable, the EU-US Data Privacy Framework.

We use AI models to transcribe interviews and draft chapters. We make no automated decision producing legal effects concerning you: no system decides whether to accept you as a customer, what you pay, or what you are granted.

Every manuscript is read and approved by the person interviewed before it is printed.

You may request access to your data, its correction or erasure, restriction of processing, portability, and you may object to processing based on legitimate interest. Where processing rests on consent, you may withdraw it at any time without affecting the lawfulness of what came before.

Write to info@biografo.net. Export and erasure are automated: an export arrives within seventy-two hours, erasure completes within thirty days.

One important point: if you bought the service for someone else, the data in their account of their life belongs to them. You can ask us to erase your data, not theirs.

If you believe the processing breaches the law you may complain to the competent supervisory authority: in Spain the Agencia Española de Protección de Datos (aepd.es), in Italy the Garante per la protezione dei dati personali (garanteprivacy.it), in the United Kingdom the Information Commissioner’s Office (ico.org.uk).