Welcome to psdevs.com. Transparency and technical rigor are the foundations of our development methodology, and we apply those same principles to the management of your privacy. As technology professionals, we understand the value of information and are committed to protecting it with high security standards, in compliance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Spain's Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), and Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP).
1. Data Controller
The data controller is the entity that owns the psdevs.com domain. For maximum transparency, our identification details are:
- Identity / Legal name: Ricardo Chiralt García
- Tax ID (Mexico): CIGR810306IK1
- Registered address: Calle 10 Ote 20, San Andrés Cholula, Puebla, Mexico.
- Privacy email: info@psdevs.com
- Activity: Web development, technology consulting and systems maintenance.
As we operate from Mexico and provide services to customers in the European Economic Area (EEA), we comply with the GDPR's extraterritoriality principle under Article 3.2 and ensure an appropriate level of protection for every user, regardless of location.
2. Purposes, Data Categories and Legal Basis
At psdevs.com we follow the data-minimization principle and process only the information strictly required to provide our services and operate this website.
Customer service and quotations
Purpose: Managing enquiries received through the website or email and preparing technical proposals.
Data: Identification details such as name, email and telephone number, and professional details such as company and position.
Legal basis: Consent under Article 6.1(a) GDPR and Article 8 LFPDPPP. By submitting the form, you authorize this processing.
Retention: One year after the last interaction or until consent is withdrawn.
Project delivery
Purpose: Web development and maintenance, WPO, audits and invoicing.
Data: Identification and financial data, and access credentials for servers and content-management systems.
Legal basis: Performance of a contract under Article 6.1(b) GDPR and Article 10 IV LFPDPPP.
Retention: Five years after the service ends, in accordance with tax and legal obligations.
Marketing communications
Purpose: Sending newsletters, technical updates and offers.
Data: Name and email address.
Legal basis: Express opt-in consent, only when the relevant checkbox has been selected.
Retention: Until you unsubscribe.
Security and technical analysis
Purpose: Log monitoring, attack prevention and error diagnosis.
Data: IP address, user agent and server logs.
Legal basis: Legitimate interest under Article 6.1(f) GDPR in maintaining the system's integrity and availability.
Retention: Rotating logs retained for six to twelve months.
3. psdevs.com as Data Processor
Because we are a technology-development agency, psdevs.com may sometimes access personal data for which you, the Client, are the controller, including the user databases of your ecommerce store. In these situations, psdevs.com acts as a DATA PROCESSOR under Article 28 GDPR and applicable Mexican law.
- We process the data only in accordance with your documented instructions.
- We do not use it for our own purposes or disclose it to third parties, except where required by law or to authorized subprocessors such as hosting providers.
- We ensure the confidentiality of our development personnel.
- When the service ends, we undertake to return or destroy the data.
This relationship will be governed in detail by a Data Processing Agreement (DPA) attached to our service proposal.
4. Data Disclosure and International Transfers
To provide high-quality services, we use leading technology infrastructure. Some data may be disclosed to the following subprocessors or recipients:
- Infrastructure and hosting: Web-hosting and cloud providers such as AWS or DigitalOcean.
- Management and productivity: Invoicing and project-management tools.
- Public authorities: Where disclosure is legally required, including SAT in Mexico or AEAT in Spain.
International transfers from the EU to Mexico: Because psdevs.com is located in Mexico, processing European residents' data may involve an international transfer. To provide the safeguards required by the GDPR, we adhere to the Standard Contractual Clauses (SCCs) approved by the European Commission in Decision 2021/914, ensuring a level of protection equivalent to European standards.
5. Your Rights (ARCO and GDPR)
You retain control over your data and may exercise the following rights free of charge:
- Access: Learn what data we hold about you.
- Rectification: Correct inaccurate information.
- Erasure / Cancellation: Request deletion of your data, including the right to be forgotten.
- Objection: Object to processing for specific purposes.
- Portability: Receive your data in a structured format.
- Restriction: Request suspension of processing in certain circumstances.
Procedure: Email info@psdevs.com and attach a copy of an official identification document. We will respond within a maximum of 20 business days in Mexico or one month in the European Union.
6. Information Security
At psdevs.com, security is not optional. We apply robust technical and organizational measures to protect your information:
- TLS 1.2/1.3 encryption for all communications.
- Encryption of databases at rest.
- Two-factor authentication (2FA) for our team.
- Redundant backups and intrusion monitoring.
7. Amendments
We reserve the right to amend this policy to reflect legislative developments or technological changes. We recommend reviewing this page periodically.