Privacy Policy

1. Data Controller

Personal data collected through Web Forge Pro is processed by its owner, Joaquim Llort Grau, a freelance professional with fiscal domicile in Spain, hereinafter the 'Data Controller'.

Contact email for privacy matters: info@forgebio.io

2. What Data We Collect and for What Purpose

To correctly provide the ForgeBio.io service, we process the following categories of personal data:

a) Account Data
Email address and password. The password is stored in encrypted/hashed form and is not accessible by the Controller.
Legal basis: Performance of the contract.

b) Profile Data
Images, texts, and links that the user decides to voluntarily publish on their public profile within the platform.
Legal basis: Performance of the contract and user consent for the publication of public content.

c) Technical Data
IP address, browser type, device, and access logs, collected automatically during the use of the service.
Legal basis: Legitimate interest of the Controller to ensure service security, prevent misuse, and detect technical incidents.

These data are kept for the time strictly necessary for said purposes.

3. Do We Share Your Data?

The Controller does not sell or rent personal data to third parties.

Data is only shared with essential service providers (Data Processors) necessary for the operation of the platform, including:

• Hosting and database storage services (Hostinger).
• Email and professional communication services (Google Workspace).

In the event that any of these providers process data outside the European Economic Area, appropriate guarantees are applied in accordance with the GDPR, such as the Standard Contractual Clauses approved by the European Commission.

4. Data Retention

Personal data will be kept while the user's account remains active.

In the event of account deletion, data will be removed from the Controller's active systems within a reasonable and technically feasible timeframe, except for data that must be kept duly blocked for compliance with legal obligations (e.g., tax or judicial).

5. User Rights

The user may exercise the following rights recognized by the General Data Protection Regulation (GDPR) at any time:

• Access to their personal data.
• Rectification of inaccurate data.
• Erasure of their data ('Right to be forgotten').
• Restriction of processing.
• Objection to processing.
• Data portability.
• Right not to be subject to automated decisions, where applicable.

To exercise these rights, the user may send a request to info@forgebio.io.

Likewise, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD).

6. Cookies and Third-Party Tracking

At ForgeBio.io, we strictly differentiate between our platform's own cookies and the cookies configured by our users on their respective public profiles:

A) Platform Cookies (Our Cookies)
The main website uses technical cookies strictly necessary for the proper functioning of the service (e.g., login and display preferences). We also use our own analytical cookies intended to improve the service, subject to the user's prior consent managed through our main cookie banner.

B) Cookies on User Profiles (PRO Tracking Pixels)
The Platform allows paid users (PRO) to insert third-party tracking codes (such as Meta Pixel, Google Analytics, etc.) into their personalized URLs. In these scenarios:

• The profile owner is the sole Data Controller of the data collected about their visitors.
• ForgeBio.io provides an automated consent banner on these profiles to block the loading of these pixels until the visitor grants explicit permission, with Web Forge Pro acting exclusively as a Technical Data Processor.
• Web Forge Pro does not have access to, control over, or store the browsing data that these third-party providers collect directly through the users' profiles. Any exercise of rights by a visitor regarding this tracking must be directed directly to the owner of the visited profile.