# WebCraftSystems
Legal & Compliance Documentation
Version 2.1 | Last updated: 2026-08-19 | Status: active
Location: Alameda Mazarredo 15, 48001 Bilbao, Spain
Email: [email protected] | Phone: +34 660 39 85 47
## 1. Privacy Policy
# Section effective: 2026-01-01 | GDPR Compliant
§ 1.1 Data Controller

The data controller responsible for your personal data is WebCraftSystems, located at Alameda Mazarredo 15, 48001 Bilbao, Spain. For any data-related inquiries, contact us at [email protected].

§ 1.2 Data We Collect

We collect personal information you voluntarily provide through our contact forms, including: full name, email address, phone number, and project descriptions. We also collect technical data such as IP addresses, browser type, and usage analytics through essential cookies.

§ 1.3 Purpose of Processing

Your data is processed exclusively for: responding to inquiries, delivering requested services, maintaining project communication, fulfilling contractual obligations, and complying with legal requirements under EU GDPR Regulation 2016/679.

§ 1.4 Data Retention

Personal data is retained for the duration necessary to fulfill the purposes for which it was collected, plus a maximum of 24 months after the last interaction. Project-related data may be retained for up to 60 months to comply with tax and accounting obligations under Spanish law.

§ 1.5 Your Rights (GDPR Articles 15-22)

You have the right to: access your personal data, rectify inaccurate data, request erasure ("right to be forgotten"), restrict processing, data portability, object to processing, and withdraw consent at any time. To exercise these rights, email [email protected].

§ 1.6 Data Transfers

We do not transfer personal data outside the European Economic Area (EEA) without appropriate safeguards. Any third-party processors we engage are bound by Standard Contractual Clauses (SCCs) and GDPR compliance agreements.

§ 1.7 Supervisory Authority

You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es if you believe your data protection rights have been infringed.

## 2. Terms of Service
# Section effective: 2026-01-01
§ 2.1 Service Scope

WebCraftSystems provides web development, frontend/backend engineering, third-party integrations, security hardening, cloud deployment, and related technical services as described in individual service agreements. All services are delivered from our office at Alameda Mazarredo 15, 48001 Bilbao, Spain.

§ 2.2 Project Agreements

Each project begins with a signed Statement of Work (SOW) defining scope, deliverables, timelines, and pricing. Any changes to scope require a written change order signed by both parties. Estimates are valid for 30 calendar days from the date of issue.

§ 2.3 Payment Terms

Invoices are payable within 14 days of issuance. A 50% deposit is required before project commencement. Late payments incur a 1.5% monthly interest rate. All prices are quoted in EUR and are exclusive of applicable taxes unless otherwise stated.

§ 2.4 Intellectual Property

Upon full payment, all custom code, designs, and deliverables are transferred to the client. WebCraftSystems retains the right to display work in portfolio and case studies unless explicitly restricted in the SOW. Third-party libraries and frameworks remain subject to their respective licenses.

§ 2.5 Limitation of Liability

WebCraftSystems' total liability shall not exceed the total amount paid by the client for the specific service giving rise to the claim. We are not liable for indirect, incidental, or consequential damages, including loss of data, revenue, or business opportunities.

§ 2.6 Termination

Either party may terminate a project agreement with 14 days written notice. Upon termination, the client is responsible for payment of all work completed up to the termination date. Deliverables completed will be transferred upon receipt of outstanding payments.

## 3. Cookie Policy
# Section effective: 2026-01-01 | ePrivacy Directive Compliant
§ 3.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. They help us provide a better user experience by remembering your preferences and understanding how you use our site.

§ 3.2 Essential Cookies

We use strictly necessary cookies for: session management, security tokens (CSRF protection), cookie consent preferences, and basic analytics. These cookies are required for the website to function and cannot be disabled. They do not require consent under the ePrivacy Directive.

§ 3.3 Analytics Cookies

With your consent, we may use privacy-respecting analytics tools (such as Plausible or Matomo) to understand site usage patterns. These tools operate without tracking personal data and are fully GDPR-compliant. No data is shared with third parties.

§ 3.4 Managing Cookies

You can manage your cookie preferences at any time through the cookie consent banner displayed on your first visit. You may also clear cookies through your browser settings. Disabling essential cookies may impair website functionality.

§ 3.5 Third-Party Cookies

WebCraftSystems does not use third-party advertising cookies or tracking pixels. Embedded content (such as Google Maps) may set their own cookies in accordance with their respective privacy policies. We encourage users to review Google's privacy policy for Maps-related data processing.

## 4. Refund & Reimbursement Policy
# Section effective: 2026-01-01 | EU Consumer Rights Directive
§ 4.1 Right of Withdrawal

In accordance with EU Consumer Rights Directive 2011/83/EU, consumers have the right to withdraw from a service contract within 14 days of purchase, provided that work has not yet commenced. To exercise this right, contact [email protected] with your order details.

§ 4.2 Project-Based Refunds

For ongoing projects, refunds are evaluated based on work completed versus remaining deliverables. A partial refund will be issued for undelivered milestones, calculated proportionally. Work already completed and delivered is non-refundable.

§ 4.3 Refund Processing

Approved refunds are processed within 14 business days to the original payment method. Refund requests must be submitted within 30 days of the relevant invoice date. WebCraftSystems reserves the right to deduct administrative fees of up to 5% for processing refunds.

§ 4.4 Dispute Resolution

In the event of a dispute, both parties agree to attempt resolution through good-faith negotiation for a period of 30 days before pursuing any legal remedies. Disputes shall be subject to the jurisdiction of the courts of Bilbao, Spain.

§ 4.5 Force Majeure

WebCraftSystems shall not be liable for delays or failures in performance resulting from causes beyond reasonable control, including natural disasters, pandemics, government actions, or infrastructure failures. In such cases, both parties will negotiate modified timelines in good faith.

This documentation is maintained by WebCraftSystems, Alameda Mazarredo 15, 48001 Bilbao, Spain.

For questions regarding these policies, contact: [email protected]

Document version 2.1 — Generated with love from Bilbao, Spain.