TOTI LAB STUDIO
Portal privacy
Candidate for review. Public collection remains disabled until this information is approved and the service configured.
Controller and purpose
The controller is identified in the Max Bonàs legal notice. Feedback is used to review issues, improve products and reply when you voluntarily provide an email. It is not sold, published or added to marketing lists.
Data and proposed lawful basis
Questions and email are optional. Proposal pending legal review: consent through voluntary submission, withdrawable without affecting prior processing. We record the product, answers, supplied context and dates. Do not submit passwords, sensitive information or other people’s data.
Retention and rights
Proposal: email for up to 90 days after closure and answers for up to 12 months. Deletions are managed under controller review. Request access, correction, erasure or consent withdrawal at support@maxbonas.com. Without email, keep your report reference so it can be located. You can complain to the AEPD.
Providers and abuse protection
Cloudflare hosts the portal and database. Contractual configuration and international transfers must be verified before enabling collection. Abuse limits use a temporary IP-derived value without storing the IP in portal tables; provider logs are reviewed separately.
Metrics and applications
Only aggregate events are counted, without analytics cookies or persistent identifiers; DNT and GPC are respected. Linked products and stores may have their own terms and processing.