Privacy

This Privacy Policy explains how Christicons ("we", "us", or "our"), operating at christicons.com, collects, uses, and protects your personal data when you use our Website. We are committed to processing your data in compliance with Regulation (EU) 2016/679 (GDPR) and applicable Spanish data protection law, including the Ley Orgánica 3/2018 (LOPDGDD).

• Name: Christicons
• Contact email: [email protected]
• Website: christicons.com

As we are based in Spain, the competent supervisory authority is the Agencia Española de Protección de Datos (AEPD), www.aepd.es.

The Website does not require registration. We collect different types of data depending on how you interact with us:

• Download and usage analytics: When you download or copy an icon, we collect your IP address, browser user agent, timestamp, and the identifier of the icon accessed. This data is used for two purposes: analytics (understanding which icons are popular and how the service is used) and security/anti-abuse (rate limiting and preventing misuse). Legal basis: legitimate interest (Article 6(1)(f) GDPR). Retention: up to 90 days for raw technical logs; aggregated analytics data may be retained indefinitely.
• Website analytics: We use Google Analytics to collect aggregated data about page views, session duration, device type, browser, and general geographic location. This data is anonymized and used to improve the Website. Legal basis: consent (Article 6(1)(a) GDPR), obtained via our cookie consent banner. You can withdraw consent at any time through the cookie banner or by installing the Google Analytics opt-out browser extension.
• Newsletter subscription: If you subscribe to our newsletter, we collect your email address. This data is processed by Loops.so on our behalf and is used only to send you updates and announcements from Christicons. Legal basis: consent (Article 6(1)(a) GDPR). You may withdraw consent and unsubscribe at any time via the link in any newsletter email. Retention: until you unsubscribe or we cease the newsletter service.
• Icon submissions: If you submit icons to Christicons (currently not available; may be introduced in the future), we would collect the data you provide (e.g., name, social media handle, icon description). We will update this Policy before enabling submissions. Legal basis: contractual necessity / legitimate interest.
• Contact: If you contact us directly (e.g., by email), we collect the information you provide in order to respond to your inquiry. Legal basis: legitimate interest (Article 6(1)(f) GDPR). Retention: as long as necessary to resolve your inquiry and for a reasonable period thereafter.
• Cookie-related data: We use cookies and similar technologies. For detailed information, see our Cookie Policy.

We use the following trusted third-party services to operate the Website. Each acts as a data processor under our instructions, except where they act as independent data controllers (as noted). Each has its own privacy policy.

• Google Analytics (Google LLC / Google Ireland Ltd): Website usage analytics. Google may act as an independent controller for its own purposes. You can opt out via the Google Analytics browser add-on.
• Loops.so: Newsletter management. Processes email addresses for sending communications.
• Supabase: Cloud storage for icon files and associated metadata.
• Cloudflare: Security, performance, and spam protection (including Turnstile anti-bot verification). Cloudflare may independently process certain data as part of its security services.
• Cookie Script: Cookie consent management and banner display.

We do not sell, rent, or trade your personal data to third parties.

Some of our service providers (including Google and Cloudflare) may process your data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, in accordance with Article 46 GDPR.

Under the GDPR and the LOPDGDD, you have the following rights regarding your personal data:

• Right of access (Article 15 GDPR): request a copy of the data we hold about you.
• Right to rectification (Article 16 GDPR): request correction of inaccurate data.
• Right to erasure (Article 17 GDPR): request deletion of your data, where applicable.
• Right to restriction of processing (Article 18 GDPR): request that we limit how we use your data.
• Right to data portability (Article 20 GDPR): request your data in a structured, machine-readable format.
• Right to object (Article 21 GDPR): object to processing based on legitimate interest.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within one month as required by Article 12 GDPR. You also have the right to lodge a complaint with the AEPD (www.aepd.es) if you believe your rights have not been respected.

We implement appropriate technical and organizational measures to protect your personal data, including HTTPS encryption, access controls, and use of trusted cloud providers with their own security certifications. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

• Technical logs (IP, user agent, download events): up to 90 days.
• Aggregated analytics data: retained indefinitely (no personal data).
• Newsletter email addresses: until you unsubscribe.
• Contact correspondence: as long as necessary to resolve the matter, then deleted.

The Website is not directed to children under the age of 14. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page. For material changes, we will post a notice on the Website. Continued use of the Website after a change constitutes acceptance of the updated Policy.

For questions or to exercise your rights: [email protected]

To lodge a complaint with the Spanish data protection authority: Agencia Española de Protección de Datos (AEPD) — www.aepd.es