Privacy Policy

In compliance with the Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), the Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016 (hereinafter, GDPR), and the ICANN Registration Data Policy (published on 21-02-2024, effective as of 21-08-2025), this Privacy Policy regulates the processing of personal data that SOLUCIONES CORPORATIVAS IP, S.L. – hereinafter, SCIP or DonDominio – conducts, as a Controller and/or Data Processor, regarding the information that users and/or clients (individuals) provide:

• as a consequence of the contracting and management of services marketed by SCIP (hereinafter, the "Services"; and
• specifically in the registration, transfer, and maintenance of gTLD domain names, in accordance with the provisions of the aforementioned Registration Data Policy and the ICANN Registrar Accreditation Agreement.

If you do not accept the terms of this Policy, please refrain from accessing and/or using the Services. This Policy does not apply to products, services, or activities provided by third parties unrelated to DonDominio.

Truthfulness and legality of the data. Unless acting through valid legal representation, no user and/or client may use the identity of another person or communicate third-party data. Data provided to SCIP must be personal, truthful, accurate, current, adequate, and relevant to the purpose for which they are collected. The user and/or client will be solely responsible for any damage, direct or indirect, caused to third parties or SCIP by providing false, inaccurate, outdated, inadequate, or irrelevant data. Anyone providing third-party data declares to have previously obtained the corresponding consent or legal authorization and assumes any resulting liability otherwise.

Capacity and minors. The user and/or client communicating data to SCIP declares to be of legal age and to have full capacity to act in accordance with Spanish legislation. Any data related to minors will require prior authorization from parents, guardians, or legal representatives, who will be considered responsible for the truthfulness and legality of the data provided by the minors in their charge.

DATA CONTROLLER

•   Company Name: SOLUCIONES CORPORATIVAS IP, S.L.,(SCIP or DonDominio)
•   Trademark: DONDOMINIO    
•   Address: C/ Menestrals, 14, C.P. 07500 Manacor (Illes Balears), Spain
•   NIF: B57333601
•   Email: info@scip.es
•   Registration details: Registered in the Mercantile Registry of Baleares Volume 2120, Book 0, Page 173, Sheet PM-50105
•   Data Protection Officer (DPO): SCIP has an external Data Protection Officer, appointed in accordance with Arts. 37 and 38 GDPR, whose contact address is: dpo@scip.es

PURPOSES OF DATA PROCESSING

The personal data you provide us –identification (name, surname, DNI/NIE), contact data (postal address, phone numbers, email), and, where applicable, the data fields required by ICANN's Registration Data Policy (see Annex I)– will be processed for the management and control of the legal relationship binding you to SOLUCIONES CORPORATIVAS IP, S.L. (DonDominio or SCIP), and specifically for the purposes detailed below:

1. Provision and maintenance of Services: Manage the registration, access, technical configuration, billing, renewal, transfer, and proper use of the contracted Services, according to their nature and conditions.

2. User/client support: Communicate with You and respond to incidents, requests, comments, or inquiries you make through our channels (web forms, chat, phone, or email).

3. Platform operation and security: Provide, update, maintain, and protect our websites, infrastructures, and internal processes, ensuring their secure operation and the integrity of the registered domain names.

4. Registration of gTLD domain names: Process the registration, renewal, transfer, suspension, or cancellation of domain names, in accordance with the ICANN Accreditation Agreement and the Registration Data Policy. Note: Data declared as "redacted" in the RDDS/WHOIS will remain non-public unless a disclosure request is processed in accordance with the procedure in Annex II.

5. Offers and service improvements: Send you proposals for new products, functional updates, or offers related to already contracted Services, via electronic or non-electronic means. These communications are based on SCIP's legitimate interest in retaining and improving its clients' experience; You may object at any time.

6. Essential operational communications: Send notices regarding expirations, technical incidents, scheduled maintenance, or essential contract changes. These communications are inseparable from the service and cannot be declined.

7. Marketing and surveys (with prior consent): With your express authorization, conduct satisfaction surveys or send you commercial information about related proprietary or third-party services. Consent can be revoked at any time via the mechanism indicated in each communication.

8. Personnel or collaborator selection processes: Manage your application when you participate in job or collaboration offers published by SCIP.

9. Processing on behalf of the client: When to perform a service, SCIP must access personal data for which the client is the Controller or Processor, such data will be processed strictly as a Data Processor, in accordance with Article 28 GDPR and the corresponding data processing agreement.

SCIP will not process your data for purposes other than those described here, except for legal obligation or judicial requirement.

Completion of forms marked with an asterisk (*) is mandatory to process your request or provide the service. The failure to supply the required data—or the subsequent revocation of consent in cases where it is the legitimizing basis—may prevent the proper provision of the service or the handling of your request.

By providing your data, you guarantee its truthfulness, accuracy, and validity, and consent expressly to its processing in accordance with the purposes described above.

DATA RETENTION (DURATION OF DATA PROCESSING)

Upon the expiration of the indicated periods, data will be blocked and kept solely to address potential administrative, civil, or criminal responsibilities until they are finally securely deleted. DonDominio will not retain data for periods longer than necessary for each purpose, except for legal obligation or judicial mandate.

LEGITIMACY OF DATA PROCESSING.

The processing of your personal data is based, depending on the nature of each operation, on the legal bases provided for in Article 6 of the GDPR:

a) Execution of a contract (art. 6.1 b) GDPR). It is essential for managing the registration, provision, billing, renewal, transfer, or cancellation of contracted Services, as well as for formalizing and maintaining gTLD domain name registrations in accordance with the ICANN Accreditation Agreement and the Registration Data Policy.

b) Compliance with legal obligations (art. 6.1 c) GDPR). Certain processing is carried out because the law requires it: tax and accounting obligations, traffic data retention (Registration Data Policy, 25/2007 Law), obligations imposed by the Registration Data Policy or requests from administrative and judicial authorities.

c) Legitimate interest of DonDominio (art. 6.1 f) GDPR). We use your data to ensure the security and stability of our platform and the Domain Name System, personalize our services, address claims or inquiries, conduct satisfaction surveys, and offer you products or services similar to those you already enjoy. This legitimate interest is balanced against your rights and expectations, always providing a simple mechanism to object.

d) Consent of the interested party (art. 6.1 a) GDPR). When required by the law, we will request your prior authorization, for example, for sending commercial communications or including your application in future selection processes. You can withdraw this consent at any time without retroactive effects on the treatments already conducted.

RECIPIENTS OF COMMUNICATIONS AND DATA TRANSFERS.

General Character. DonDominio will not disclose or communicate your personal data to third parties, except (i) where there is a legal obligation, (ii) where it is necessary for the correct provision of the contracted service, or (iii) where it has your express consent.

Domain name registration services. To process the registration, renewal, or transfer of a gTLD domain (or a ccTLD, as appropriate), it is necessary to communicate certain data to the competent registering entity —the corresponding Registry Operator— and, where required by ICANN regulation, to: - ICANN and its Data Escrow service;

• the national or international authority managing the territorial extension (ccTLD);

• technical providers acting as Data Processors (e.g., payment gateways or communication dispatch platforms).

In these cases, DonDominio transmits only the essential data fields, defined in ICANN's Registration Data Policy, solely for the purpose of formalizing and maintaining the registration.

The complete list of domain extension managing entities can be consulted in the IANA public directory: https://www.iana.org/domains/root/db. The Internet Assigned Numbers Authority oversees, among others, root DNS servers and global IP address allocation.

International transfers. Some Registry Operators or providers may be located outside the European Economic Area. When it is necessary to transfer data to a country without a European Commission adequacy decision, DonDominio will apply the Standard Contractual Clauses 2021/914/EU and, where necessary, additional technical measures (encryption, pseudonymization) to ensure an equivalent level of protection to that in Europe.

Credit information systems. In the event of non-payment or late payment of due amounts, DonDominio may communicate the necessary data to the ICIRED asset solvency file or another credit information system that complies with the GDPR and LOPDGDD, solely for managing recovery and evaluating credit risk by third parties with legitimate interest.

Effect of consent. By accepting the Service Conditions, you expressly authorize the indicated transfers and disclosures as inherent to the service. If you revoke this consent, DonDominio will not be able to continue providing you with the Services requiring such communications.

RIGHTS OF THE DATA SUBJECTS.

In accordance with Articles 15 to 22 of the GDPR, you may:

- Access the personal data processed by DonDominio.

- Rectify inaccurate or incomplete data.

- Erase the data when they are no longer needed or when the conditions of Article 17 GDPR apply.

- Object to processing or request its restriction where applicable.

• Request data portability that you have provided.

• Request not to be subject to automated individual decision-making, including profiling.

When the legal basis is consent, you can withdraw it at any time without retroactive effects. Certain rights may be temporarily restricted when the maintenance of the data is mandated by sector-specific laws (e.g., ICANN's Registration Data Policy) or by requirements from competent authorities.

Contact details for exercising these rights: SCIP, in compliance with Articles 37 and following of Regulation (EU) 2016/679 of April 27, 2016 (GDPR), has an officially appointed Data Protection Officer with the Control Authority, whose contact details are below:

SOLUCIONES CORPORATIVAS IP, S.L. (Data Protection Officer) C/ Menestrals, 14, 07500 Manacor (Illes Balears) – Spain Email: dpo@scip.es

Complaint to the supervisory authority. If you believe that your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (https://www.aepd.es).

ADDITIONAL INFORMATION

Traffic data retention (Law 25/2007). In accordance with Law 25/2007, DonDominio is required to retain certain traffic and location data derived from electronic communications for the legally prescribed period, solely to make them available to competent authorities when there is a formal requirement.

Limited publication in RDDS/WHOIS (Registration Data Policy). For gTLD domain registrations, only fields designated as “public” by ICANN's Registration Data Policy will be published in the RDDS/WHOIS directory (e.g., domain name, country of the holder, registrar identifier, and abuse contacts). Other personal data will be shown as redacted, with third-party disclosure possible only through the policy's specified request procedure.

Security measures. DonDominio implements appropriate technical and organizational measures to:

ensure the confidentiality, integrity, availability, and ongoing resilience of systems and data processed; - restore data and access promptly following any physical or technical incident;

• regularly verify and assess the effectiveness of the implemented measures;

• pseudonymize and encrypt personal data where necessary.

These safeguards are periodically reviewed and kept updated per the requirements of Article 32 GDPR.

ANNEX I - gTLD DOMAIN REGISTRATION DATA

ANNEX II - PROCEDURE FOR DISCLOSURE OF NON-PUBLIC DATA

1) Submission of the request: Directed to abuse@scip.es from a verifiable account, stating:

a) Affected domain

b) Identity of the applicant and proof of legitimacy (e.g., judicial mandate, right to legal protection, cyber-abuse investigation, etc.).

c) Specific data requested and motivation.

2) Acknowledgement of receipt (≤ 5 working days): DonDominio confirms receipt and assigns a case number.

3) Assessment (≤ 30 calendar days). Factors considered:

a) Invoked legal basis and proportionality.

b) Rights and privacy expectations of the holder.

c) Risk of misuse.

4) Reasoned resolution

a) Partial/total approval: requested data is provided via a secure channel.

b) Denial: reasons and appeal channels are indicated.

5) Registration and storage: All requests, decisions, and accesses are recorded and retained for 15 months (art. 15 RDP).icann.org

6) Appeal: The applicant may file a complaint with the Spanish Data Protection Agency or ICANN Compliance if they disagree with the decision.