Who processes your data
Rewards is an application by Germán Ezequiel Laso Andino, trading as ProfBlu. He is the data controller for your account and for your activity in the program.
- Owner: Germán Ezequiel Laso Andino, sole trader (libero professionista).
- VAT number (Partita IVA): 04702090988. Italian tax code (codice fiscale): LSNGMN88S04Z600M.
- Professional activity not registered in the Italian Business Register (no REA number).
- Contact address: Via della Sega 1, 38080 Verdesina, Porte di Rendena (TN), Italia.
- Email for anything about your data: privacidad@profblu.com.
No data protection officer has been appointed: the law does not require one for an activity of this size.
A direct program, not an intermediary
Rewards is a platform-wide program for the people who use its products, not a tool a business uses to process its own customers' data: the account that earns tokens and points is always your own platform account, never a third party's.
What data we process
What follows comes from the application's code, not from a generic list.
About your account in the program
Your Rewards account is linked, one to one, to the same centralised identity you use across the rest of the platform. It has no sign-up or password of its own.
About your tokens and points
Your balance is not stored as a number: it is calculated from the history of movements — each grant and, where applicable, each reversal — linked to your account.
About your claims
When you claim recognition for something you have done in another product: what action you are claiming, what it relates to, when it happened, its origin and its status (submitted, under automatic screening, granted, under manual review, rejected or revoked). If the action requires it, you attach evidence — a document or an image, up to 10 MB, in PDF, JPEG or PNG: it is stored under a random name, not the original filename, and referenced in a way that is not accessible through a direct public URL.
About errors
When the server fails, the error is stored so it can be fixed. Only server failures are stored; a mistake made by the caller is not.
Why, and on what legal basis
To manage your participation in the program: record your claims, calculate your balance, show you your levels. It is what is needed to provide the service you requested by participating. We do no profiling, no advertising, and we neither sell nor share data with third parties for commercial purposes.
Where it is processed, and who else sees it
Hetzner hosts Rewards' server. There is nobody else: nothing in the code involves any analytics tool, advertising, or any other external provider receiving your data.
For how long
As long as your platform account exists and you have activity in the program. The history of token and point movements is kept as proof that recognition was granted, and the evidence you attach for as long as the claim it supports remains worth keeping it for.
Your rights
You may exercise the rights the General Data Protection Regulation gives you: access, rectification, erasure, portability, objection, restriction and withdrawal of consent without affecting what was done before. Write to privacidad@profblu.com from your account email. We reply within the legal deadline, one month at most.
You may complain to a supervisory authority: in Italy, the Garante per la protezione dei dati personali (www.garanteprivacy.it); in Spain, the Agencia Española de Protección de Datos (www.aepd.es); or the authority of the EU country where you live.
Minors
Rewards follows the same minimum age as the rest of the platform: it is not directed at children under fourteen.
Security
Communications are encrypted (TLS). Your session's access token is not stored in the browser: it lives only in memory while you use the application. Access to data depends on each person's role. If we detect a breach that affects you, we will tell you, and the supervisory authority within the 72 hours the law sets.
Changes
If we change what we do with data, we change this text and move the revision date.