Effective Date: August, 28th, 2025
Last Updated: August, 28th, 2025
1. Data Controller
- Identity:
White Star Line - Address:
Sevilla, Sevilla - Privacy Contact Email:
raulmorenoyague@raulmorenoyague.com - Website: raulmorenoyague.com
2. Scope of this Policy
This privacy policy applies to the processing of personal data on the website raulmorenoyague.com (hereinafter, the “Site”) and specifically to the use of the VitiCare tool, an application for analyzing grape leaf health that is embedded from the Hugging Face Spaces platform.
3. Personal Data We Process
We process the following categories of data:
- Data you provide directly:
- Images: Photographs of grape leaves that you voluntarily upload for analysis via the VitiCare tool. We ask that you do not include faces, people, license plates, or any other personal data in these images.
- Contact Data: If you contact us via email or a contact form, we will process your name, email address, and the content of your message.
- Data we collect automatically:
- Technical Metadata: IP address, browser type and version, operating system, device identifiers, and other technical data your browser sends when connecting to our Site and to the Hugging Face iframe. This data is necessary for communication, operation, and security.
- Cookie and Consent Data: Records of your consent for the use of cookies and for loading third-party content (the VitiCare iframe), managed through our consent banner.
4. Purposes and Legal Bases for Processing
| Purpose | Data Processed | Legal Basis (GDPR) |
|---|---|---|
| To provide the VitiCare analysis service | Images and technical metadata | Consent (Art. 6.1.a): By uploading the image and accepting the module’s loading, you consent to its processing for this purpose. |
| To manage and secure the Website | Technical metadata, cookie data | Legitimate Interest (Art. 6.1.f): To ensure the security, availability, and performance of our website. |
| To respond to your inquiries and requests | Contact data | Consent (Art. 6.1.a) and/or Pre-contractual measures (Art. 6.1.b) |
| To comply with legal obligations | Relevant data for each case | Legal Obligation (Art. 6.1.c): To comply with judicial or official requirements. |
5. Data Retention Periods
- Images uploaded to VitiCare: They are not stored. hey are not permanently stored. Images are uploaded to a temporary, ephemeral directory on the server for the sole purpose of performing the analysis. The file is automatically deleted when the user’s session ends or when the server process recycles, which happens periodically. We do not build a database with the images you upload.
- Technical and security logs: Retained for a maximum of
30to investigate potential incidents. - Communications and inquiries: Retained for the time necessary to resolve your query and subsequently blocked during the legal statute of limitations periods.
- Consent records: Retained as long as necessary to demonstrate our compliance with regulations (typically, several years).
6. Data Recipients (Data Processors)
We do not sell your personal data. We only share it with service providers who help us operate, under strict data processing agreements:
- Hugging Face, Inc.: A U.S.-based provider that hosts the VitiCare application on its “Spaces” platform. When you use the tool, your browser connects directly to their servers. You can review their privacy policy here: https://huggingface.co/privacy.
- Hosting Provider:
Hostinger,which hosts our website on servers located in[Location of servers, e.g., the European Union]. - WordPress Plugins: We use plugins for security and spam management
[e.g., Akismet]and for consent management[e.g., Complianz].
7. International Data Transfers
The use of Hugging Face, Inc. involves an international transfer of data to the United States. This transfer is safeguarded by the Standard Contractual Clauses (SCCs) adopted by the European Commission, along with supplementary security measures to ensure an adequate level of protection for your data.
8. Your Data Protection Rights
You have the right to:
- Access: Know what data we process about you.
- Rectification: Correct inaccurate or incomplete data.
- Erasure (“right to be forgotten”): Request that we delete your data.
- Restriction of processing: Request that we suspend the processing of your data in certain cases.
- Object: Object to processing based on our legitimate interest.
- Data Portability: Receive your data in a structured, commonly used format.
- Withdraw Consent: You can withdraw your consent at any time, without affecting the lawfulness of prior processing.
To exercise these rights, you can write to us at raul@raulmorenoyague.com, attaching a copy of your ID document. You also have the right to lodge a complaint with your national data protection authority (e.g., the Spanish Data Protection Agency (AEPD) at www.aepd.es).
9. Data Security
We have implemented appropriate technical and organizational security measures (HTTPS, access controls, security plugins, etc.) to protect your personal data against loss, misuse, or unauthorized access.
10. Changes to the Privacy Policy
We reserve the right to modify this policy. We will inform you of any substantial changes by publishing the new version on our Site and indicating the last updated date.