Carry Manager Privacy Policy

Last updated: September 2025

This Privacy Policy regulates the processing of personal data of users of the Carry Manager application, developed and managed by Felipe J. Gaitán Cara, under the brand asynQrono, with registered office at Calle Almeja 2, 04712, El Ejido, Almería, Spain.

The use of the application implies the express acceptance of this Privacy Policy.

1. Data Controller

Controller: Felipe J. Gaitán Cara (asynQrono)

Tax ID (NIF): 54120486z

Address: Calle Almeja 2, 04712, El Ejido, Almería, Spain

Phone: +34 950593394

Contact Email: info@asynqrono.com

Email for exercising rights: privacy@asynqrono.com

2. Collected Personal Data

The Carry Manager application only collects the following personal data from users:

• Email address.
• Username (pseudonym, not real name).
• Access password (stored encrypted).

No other personal data is collected unless voluntarily provided by the user.

3. Purpose and Legal Basis for Processing

The data is processed for the following purposes:

• Creation and management of the user account.
• Authenticated access to the application.
• Compliance with applicable legal obligations.

The legal basis for processing is:

• The execution of the service provision contract.
• Compliance with legal obligations.

4. Data Retention Period

Data will be retained:

• As long as the user account is active.
• Until the user requests its erasure.

As long as the application remains in operation.

Once the account is deleted, the data will be erased, except for legal retention obligations.

Retention of historical data after account deletion: Once deletion is requested, historical records will be anonymized to maintain the referential integrity of the service. This process involves the removal of your username and its replacement with a non-identifying placeholder. Any remaining data will be retained solely for statistical or technical operational purposes, with no possibility of re-identification.

This retention is based on the legitimate interest of the data controller to ensure the functionality and consistency of the service for other users.

5. Recipients and Transfers

We do not sell, rent, or share your personal data with third parties for commercial or advertising purposes.

For the proper functioning of the application, we rely on the collaboration of service providers acting as Data Processors (in accordance with Art. 28 of the GDPR). Currently, we use Supabase services for database storage and management, under a contract that guarantees compliance with the security measures required by European regulations.

Information storage is carried out on servers located in France (European Union). No international data transfers are made outside the European Economic Area (EEA), unless there is a legal obligation or judicial requirement.

6. Information Security

asynQrono adopts appropriate technical and organizational measures to protect personal data:

• Encryption of passwords at rest.
• Secure communications via HTTPS protocol.
• Restricted and controlled access to the database.

Compliance with the obligations provided in the GDPR (EU 2016/679) and the LOPDGDD (Organic Law 3/2018).

7. Cookies and Tracking Technologies

The application uses strictly necessary technical cookies for the operation of the service. No tracking, analytical, or advertising cookies are used.

Technical cookies are used to:

• Maintain the authenticated user session.
• Remember basic application preferences.

These cookies are essential for the operation of the service and do not require consent according to article 22.2 of the LSSI-CE.

8. Automated Decision-Making

The application does not perform user profiling or make automated decisions that produce legal effects or significantly affect the user.

9. User Rights

Users may exercise the following rights at any time:

• Right of access.
• Right to rectification.
• Right to erasure (right to be forgotten).
• Right to restriction of processing.
• Right to data portability.
• Right to object.

To exercise these rights, the user must send a written request to privacy@asynqrono.com, proving their identity with a photocopy of their ID, NIE, or passport.

Procedure for withdrawing consent: The user can withdraw their consent at any time by contacting us via email at privacy@asynqrono.com or by directly deleting their account from the application.

Response time: asynQrono will respond to requests for the exercise of rights within a maximum period of 30 days from the receipt of the request.

Likewise, the user has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if they consider that their rights have been violated (www.aepd.es).

10. Security Breaches

In the event of a data security breach that may entail a high risk to the rights and freedoms of users, asynQrono will notify the competent control authority within 72 hours.

If the breach poses a high risk to the rights and freedoms of users, it will also be communicated to the data subjects without undue delay.

11. Minimum Age of Use

Registration in the application is limited to users over 18 years of age.

Any account detected from a user under that age may be deleted.

12. Links to Websites

The application may include links to the official asynQrono website. No links to outside third-party sites are included. asynQrono is not responsible for the content or privacy policies of external pages.

13. Misuse

The use of the application for illegal, illicit, or purposes contrary to good faith is prohibited.

asynQrono may suspend or cancel accounts that breach this Privacy Policy or the Terms of Service.

14. Modifications

asynQrono reserves the right to modify this Privacy Policy at any time. Changes will be published in the application and/or on the official website. Continued use of the application after the publication of changes implies acceptance of the same.

15. Applicable Legislation

This Privacy Policy is governed by Spanish and European legislation on data protection, in particular:

• Regulation (EU) 2016/679 (GDPR).
• Organic Law 3/2018 (LOPDGDD).

Law 34/2002 (LSSI-CE).