Legal

Privacy policy

Last updated: November 6, 2026

1. Data controller

DIODE LOGIC SL, Spanish tax ID (NIF) B22434658, Avenida de Manoteras 24, planta 2, 28050 Madrid, Spain. Contact: support@diodelogic.com.

2. What data we process, why and on what basis

2.1 Browsing this site

When you visit the site, the server automatically records the date and time, requested page, browser used, referring page and an anonymised version of the IP address (the last part is removed before it is stored, so it does not identify a specific person). We process this data to ensure the security and proper operation of the service, based on our legitimate interest (article 6(1)(f) GDPR). It is kept for a limited period and deleted automatically by log rotation. It is not used for profiling and is not combined with other sources. From the server log we produce aggregate visit statistics (most viewed pages, dates, referrers and browser type); for this purpose the IP address is anonymised and query parameters of the visited URLs are not stored.

In addition, the server access log, which does contain the full IP address, is analysed automatically with the CrowdSec software to detect and block attacks (vulnerability scanning, brute force, abuse). That log is kept on the server for a short period, limited by its automatic rotation, and is used only for that purpose. IP addresses from which an attack is detected are blocked temporarily and shared with the CrowdSec collaborative network (CrowdSec SAS, France, European Union), which maintains a shared list of malicious addresses; likewise we receive that list to block known attackers. Legal basis: our legitimate interest in the security of the service (article 6(1)(f) GDPR).

2.2 Contact by email or phone

If you write or call us, we process the data you provide (name, email address, phone number and the content of your message) to handle your enquiry or support request. The basis is your consent and, where applicable, pre-contractual steps taken at your request (articles 6(1)(a) and 6(1)(b) GDPR). We keep conversations for the duration of the relationship and afterwards for the legally established limitation periods.

2.3 Applications

Our applications are designed to keep data on your device. What each one does is described in its policy: QR Atlas, Silueta, Rayita, Carbura, Densatum and Congestus.

2.4 Licence purchases for Densatum and Congestus

Licences for our desktop applications are sold on densatum.com and congestus.app through Stripe (Stripe Managed Payments), which acts as reseller of record: it handles the payment, issues the invoice with the applicable VAT and handles refunds. We never receive or see your card details.

When a purchase is completed, Stripe gives us your name and email address. We use them to generate your licence key, which includes them digitally signed, and send it to you by email. We keep a record of issued licences (identifier, name, email, date and purchase reference) so that we can resend your key, handle your requests and revoke keys obtained or used fraudulently. The legal basis is the performance of the contract (article 6(1)(b) GDPR) and, for bookkeeping, compliance with legal obligations. We keep that record for as long as the licence remains valid and afterwards for the applicable legal periods.

The key is verified on your own computer: the applications contact no server to check it.

3. Cookies

This site uses no cookies. It only stores your light or dark theme preference in your browser’s local storage, a technical value that does not identify you. See the legal notice for details.

4. Recipients and processors

We do not sell or share personal data with third parties, except where legally required. To provide the service we use providers acting as data processors: hosting of this site on OVHcloud servers located in the European Union, and the email service for the diodelogic.com domain. Stripe acts as the seller of Densatum and Congestus licences and is an independent controller of payment data. No international transfers of data outside the European Economic Area take place.

5. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to support@diodelogic.com. We will reply within the legal period of one month. If you believe your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).

6. Children

This site is not directed at children under 14 and we do not knowingly collect data from children.

7. Security

The site is served exclusively over encrypted connections (HTTPS) and we apply reasonable technical and organizational measures to protect the data we process.

8. Changes

If we modify this policy, we will publish the new version on this page with its update date.