Data protection
Privacy Policy
1. Data controller
Company name: JRMD LAB, S.L. Contact email: proteccion.datos@wiblo.org Website: wiblo.org
2. Data collected and purpose
a) Account data
When you create an account on wiblo.org, we store your email address and an encrypted password. This data is necessary for authentication and access to the platform. Legal basis: performance of the service contract (Article 6.1.b GDPR).
b) Digital Product Passport (DPP) data
To generate and publish your Digital Product Passport, you provide us with information about your products: name, fibre composition, images, weight, country of manufacture, production stages, certifications, care instructions and company data (name, website, logo, description). This data is stored in our database and published at the public DPP URL. Legal basis: performance of the service contract.
c) Subscription and payment data
Payment for subscription plans is managed entirely by Stripe. Wiblo does not store or have access to your banking card details. Stripe acts as a data processor and manages payment data in accordance with its own privacy policy (stripe.com/privacy). Wiblo does store in its database the Stripe customer and subscription identifiers, as well as the contracted plan and subscription status. Legal basis: performance of the contract.
d) DPP analytics data
When a consumer visits the public page of a DPP Passport, we record the approximate country (derived from the IP address, which is not stored), the device type and the visit source. This information is presented to the DPP holder as performance statistics. Legal basis: legitimate interest of the controller.
e) Contact form and free tools data
Through the contact form and free tools (carbon footprint calculator, diagnostics), you may provide your name, email address, company and sector. We use this data to respond to your enquiry or send you the requested report. Legal basis: consent of the data subject.
f) Web analytics (Cloudflare Web Analytics)
The site uses Cloudflare Web Analytics, an analytics solution that does not use cookies, does not track users across sites and does not collect identifiable personal data. Legal basis: legitimate interest of the controller.
3. Data subject rights
Under the General Data Protection Regulation (GDPR), you have the right to: — Access your personal data. — Rectify inaccurate data. — Request the deletion of your data when it is no longer necessary. — Object to processing based on legitimate interest. — Request the portability of your data. — Restrict processing in certain circumstances. To exercise any of these rights, contact proteccion.datos@wiblo.org attaching a copy of your identity document. If you believe your rights have not been properly addressed, you may lodge a complaint with the relevant supervisory authority.
4. International transfers
— Supabase: database and authentication hosted in the West EU (Ireland) region, within the European Economic Area. — Stripe: processes payments in the United States under standard contractual clauses approved by the European Commission. — Brevo: email sending with servers in the European Union. — Cloudflare: distribution network and analytics under the EU-US Data Privacy Framework.
5. Data retention
— Account data: while the account remains active and for 3 years after cancellation. — Digital Product Passport data: while the subscription is active and for 1 year after cancellation. — DPP analytics data: 12 months from registration. — Contact form and tools data: 2 years from the last interaction.
6. Cookies
Wiblo uses only strictly necessary technical cookies for the operation of the service, in particular the session cookies generated by the authentication system (Supabase Auth). No advertising, tracking or third-party cookies are used for behavioural analysis purposes. For more information, please consult our Cookie Policy available at wiblo.org/politica-cookies.
7. Changes to this policy
Wiblo reserves the right to update this privacy policy to adapt it to legislative developments or changes in the services provided. We will notify you of relevant changes via a notice on the platform or by email. The current version will always be available at wiblo.org/politica-privacidad.
Last updated: April 2026