← Back to home
Español · English · Français · Deutsch
Privacy Policy
In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), this page explains how your personal data is processed on theastrokind.com. Last updated: 17 October 2026. The Spanish version is the reference text.
1. Data controller
Francisco Manuel Cabello H.
Website: theastrokind.com
Contact email: contact@theastrokind.com
Server: Hetzner Online GmbH (Falkenstein, Germany) · EU
2. What data we collect
Data you give us voluntarily
- Email and name (optional): when you leave your email in a tool (for example, to open your best planetary hours, receive your reading or the weekly summary), when you create your account and, only if you tick its box, to receive commercial communications.
- Proof of your permission for commercial communications: if you tick that box, we keep the exact text you accepted, on which form and when; and, if you unsubscribe, when.
- Purchases: payments are handled by Stripe. We receive your email, name, country, product and amount; never your card details.
- User account: name, email and password (hashed with PBKDF2-SHA256).
- Astrological data: date, time and place of birth that you enter in the calculation tools. They are processed at that moment and, if you have an account, saved to your profile.
Data collected automatically
- Technical data: IP address (anonymised for analytics), browser type, operating system, language, device, pages visited, time spent.
3. Purposes of processing
- Providing the astrological calculation and interpretation you request.
- Managing your user account if you have registered.
- Emailing you what you ask for: your results, your access link or the weekly planetary hours summary if you sign up.
- Sending you commercial communications (ideas and offers about our tools) only if you tick the corresponding box, which is optional, separate and does not affect the service. You can unsubscribe with one click from any email.
- Managing your purchases (pass of uses, Day Pass, subscription) and their receipts.
- Analysing how the site is used in order to improve it (aggregated, anonymised data).
- Meeting legal obligations (invoicing and taxation of payments).
- Preventing fraud and technical abuse (blocking malicious IPs with fail2ban).
4. Legal basis
- Consent (Art. 6(1)(a) GDPR): analytics cookies, commercial communications by email (also Art. 21 of Spanish Law 34/2002, LSSI) and the weekly planetary hours summary.
- Performance of a contract (Art. 6(1)(b) GDPR): requested calculations, user account, payments.
- Legitimate interest (Art. 6(1)(f) GDPR): system security, fraud prevention.
- Legal obligation (Art. 6(1)(c) GDPR): where applicable, keeping tax records of payments.
5. Processors and third parties
We share only the data that is strictly necessary with these providers:
| Provider | Service | Location | Safeguards |
|---|
| Hetzner Online GmbH | Server hosting | Germany (EU) | GDPR directly |
| Google Ireland Ltd. | Google Analytics 4 (anonymous statistics) | Ireland (EU) + USA | EU-U.S. Data Privacy Framework + anonymised IP |
| DeepSeek (Hangzhou DeepSeek Artificial Intelligence) | Writing the interpretations with AI. It receives only the chart data (date, time and place of birth, calculated positions) and, in the assistant chat, whatever you type. Never your name, email, password or payment details | China (outside the EEA) | International transfer outside the EEA |
| Stripe Payments Europe Ltd. | Payment processing | Ireland (EU) | PCI-DSS Level 1, GDPR directly |
| Telegram | Internal notices to the administrator (for example, a sale: name, email and amount) | Distributed servers | Standard Contractual Clauses |
| Google (Gmail) | Sending the site’s emails | EU + USA | EU-U.S. Data Privacy Framework |
| GitHub Inc. | Storage of the site’s source code (contains no user data) | USA | EU-U.S. Data Privacy Framework |
6. How long we keep data
- User account: while the account is active. You can ask for it to be deleted at any time.
- Emails left in tools: until you ask for deletion or unsubscribe.
- Proof of your permission for commercial communications: while you keep it and, after you unsubscribe, for the time needed to prove it was respected.
- Analytics data (Google Analytics): according to the provider’s retention policy (typically 14-26 months).
- Server logs: 14 days, except when investigating security incidents.
- Payment data (where applicable): 5 years, as required by Spanish tax law.
7. Your rights (GDPR)
You can exercise the following rights at any time:
- Access: find out what data we hold about you.
- Rectification: correct inaccurate data.
- Erasure: ask for your data to be deleted.
- Objection: object to certain processing.
- Portability: receive your data in a structured format.
- Restriction: restrict processing in certain cases.
- Withdraw consent: at any time, without retroactive effect. For commercial communications, the “Unsubscribe” link in any email is enough.
- Complaint to the supervisory authority: if you believe the processing is unlawful, you can complain to the Spanish Data Protection Agency (AEPD) or to the authority of your own country.
To exercise any of these rights: contact@theastrokind.com. We will reply within 30 days at most.
8. Security
We apply appropriate technical and organisational measures: TLS 1.3 encryption on all connections, passwords hashed with PBKDF2-SHA256, server access only by SSH key (no password), automatic blocking of malicious IPs with fail2ban, encrypted backups, and auditable code in a private repository.
9. Minors
This service is not aimed at children under 14. We do not knowingly collect data from minors. If you find that a minor has given us data, contact us and we will delete it.
10. Changes to this policy
We may update this policy to reflect legal changes or new features. The “last updated” date shows when it was last changed. Significant changes will be notified by email to registered users.
Last updated: 17 October 2026 · TheAstroKind · Francisco Manuel Cabello H.