Privacy policy

Controller

ASSEMBLR VENTURES, S.L., NIF B19733815, Calle Príncipe de Vergara 13, 4th floor, door E, 28001 Madrid, Spain. Contact: direccion@quantumhive.es.

What we process and why

  • Orders: name, address, email, phone, order and payment data, to perform the contract, print and ship the book, deliver the ebook and handle returns and guarantees (Art. 6(1)(b) GDPR), and to invoice and keep accounts (legal obligation, Art. 6(1)(c)).
  • Shop: Shopify processes technical data (IP, device, necessary cookies) for cart, checkout and security (legitimate interest, Art. 6(1)(f)). Non-essential cookies are used only if you accept them in the banner.
  • Messages: what you send us, to answer you (Art. 6(1)(b) or (f)).
  • Newsletter (only if you sign up): your email, based on your consent (Art. 6(1)(a)), which you can withdraw at any time.

50 Machines notifications: if you leave us your email, ASSEMBLR VENTURES, S.L. uses it only for what you agreed to: to let you know when the book goes on sale (and, if you ticked the box, other news about this book). Legal basis: your consent, which you can withdraw at any time by writing to direccion@quantumhive.es or using the unsubscribe link. We keep it until you unsubscribe and, at most, 12 months after launch. It is hosted by Vercel Inc. (USA, EU-U.S. Data Privacy Framework). This includes anyone who signed up earlier through the reservation or notification form: there is no reservation or purchase commitment, and we only use their email for what they agreed to.

Recipients

Processors: Shopify International Ltd. (shop and checkout), the payment providers you choose, Lulu Press, Inc. (print on demand; only data needed to print and ship) and carriers, the ebook delivery provider, Vercel Inc. (hosting of 50machines.com) and our tax adviser. Some are in the US; transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

Withdrawal button: if you withdraw using the "Withdraw from contract here" button, your name, email, order number and the date and time of your withdrawal are processed to record it and send you the acknowledgement of receipt (performance of the contract and legal obligation, Art. 6(1)(b) and (c) GDPR). The button is provided by the Revoq app, operated by Jonas Busch (BuschBytes), Cologne, Germany, acting as our processor under a data processing agreement (v2.3, accepted on 17/10/2026). Its sub-processors are Supabase (database, Frankfurt, Germany), Fly.io (hosting, Amsterdam and Frankfurt), Resend (acknowledgement emails, Ireland; a US company certified under the EU-US Data Privacy Framework, with standard contractual clauses), Sentry (error monitoring, Frankfurt; no customer personal data) and Shopify (order verification; adequacy decision for Canada and standard contractual clauses). We also receive a copy of each withdrawal by email.

Retention

Orders and invoices: 6 years (Commercial Code) and tax limitation periods. Messages: as long as needed. "Machine of the Month" subscription: while active and, afterwards, the order and invoice periods (6 years). Withdrawals: deleted from Revoq after 90 days; our copy is kept with the order. Newsletter: until you unsubscribe. Notifications: until you unsubscribe and, at most, 12 months after launch.

Your rights

Access, rectification, erasure, restriction, portability and objection by writing to direccion@quantumhive.es. You may complain to the Spanish Data Protection Agency (www.aepd.es). No automated decisions or profiling.