Last updated: June 2026

At JACAR (Jacar Systems S.L.), the controller of jacar.es, we take your data protection seriously. This policy explains what data we process, why, and on what legal basis, under Regulation (EU) 2016/679 (GDPR) and Spain’s Organic Law 3/2018 (LOPDGDD).

1. Data controller

Jacar Systems S.L. (trading as “JACAR”), owner of jacar.es.

  • Tax ID (CIF): B83631242
  • Registered address: C/ Maquinilla 13D, 7-4, 28031 Madrid (Spain).
  • Registration: Madrid Mercantile Registry — Volume 18773, Book 0, Folio 156, Section 8, Sheet M-327186, Entry 1.
  • Contact: rgpd@jacarsystems.com

2. Data protection officer

Given the nature and scale of the processing, appointing a Data Protection Officer is not mandatory (Art. 37 GDPR). For any matter regarding your data, write to rgpd@jacarsystems.com.

3. What we process

  • Usage analytics (Google Analytics 4): page views and performance metrics, in aggregate, only if you accept analytics cookies.
  • Communications: if you email us, the data you provide (name, email address and the content of your enquiry).
  • Technical data: server logs (IP address, browser type, date and time) generated automatically for security and operation.

4. Purposes

  • Provide and keep the website running.
  • Measure site usage in aggregate to improve it.
  • Respond to the enquiries you send us.
  • Ensure security and prevent abuse.
  • Consent (Art. 6.1.a GDPR): cookies and analytics; you can withdraw it at any time from the cookie notice.
  • Steps at your request (Art. 6.1.b): handling the enquiries you raise.
  • Legitimate interest (Art. 6.1.f): security and correct operation of the site.
  • Legal obligation (Art. 6.1.c): where we must retain data to comply with the law.

6. Retention

We keep each piece of data only as long as necessary for its purpose:

  • Analytics: per the Google Analytics 4 configuration (by default, up to 14 months for user-level data).
  • Email enquiries: while we handle your request and for as long as needed to address any resulting liabilities.
  • Security logs: for a limited period, after which they are deleted or anonymised.

7. Recipients

We do not sell your data. We use processors acting on our behalf:

  • Hetzner Online GmbH — hosting (data centres in the EU).
  • Google Ireland Ltd. — analytics (Google Analytics 4), only with your consent.

8. International transfers

Hosting takes place within the European Union. Google’s analytics may involve processing by Google group entities outside the EEA; such transfers rely on the appropriate safeguards Google provides (standard contractual clauses and, where applicable, the EU-US Data Privacy Framework).

9. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent, by writing to rgpd@jacarsystems.com (we may ask you to verify your identity). If you believe the processing does not comply, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).

10. Cookies

We use first- and third-party cookies as detailed in our cookie policy.

11. Security

We apply technical and organisational measures to protect your data: encryption in transit (HTTPS/TLS), EU hosting, periodic backups and restricted access to information.

12. Children

The site is not directed at children under 14 and we do not knowingly collect their data. If we detect such data, we will delete it.

13. Changes to this policy

We may update this policy to reflect legal or site changes. Any change will be published on this page, showing the last-updated date.