Privacy Policy

This policy applies to the public TimeWebos website and its localized English, Italian, and Spanish pages. It does not replace the privacy policies of external websites or services linked from this site.

The website does not currently provide user accounts, an internal contact API, or a database that stores visitor submissions.

The hosting and delivery infrastructure may process technical information such as IP address, browser and device information, requested URL, timestamps, and security logs. This processing is generally necessary to deliver the website, maintain security, and diagnose operational issues.

Some calls to action open WhatsApp with a pre-filled message. The website does not send that message automatically. Data is transferred to WhatsApp only when you choose to follow the link and use its service.

WhatsApp processes information under its own terms and privacy policy. Any information you send may then be used by TimeWebos to respond to your enquiry, take pre-contractual steps you request, and keep a necessary record of the conversation.

The newsletter field currently displayed in the footer is not connected to a subscription service and does not transmit or store the entered email address. This policy must be updated before any newsletter provider or mailing list is activated.

The site contains links to portfolio websites and may display media originating from third-party sources. Opening an external link takes you to a service governed by that service's own privacy policy.

The current website code does not include advertising pixels, marketing analytics, or a marketing cookie platform. TimeWebos does not intentionally set analytics or advertising cookies through this website in its current form.

The hosting provider may use strictly necessary technical measures for security, traffic delivery, and abuse prevention. This policy and any consent mechanism must be reviewed before analytics, advertising, or other non-essential tracking is introduced.

Where applicable, technical processing is based on the legitimate interest in operating and securing the website. Communications you initiate may be processed to answer your request or take steps before entering into a contract.

Personal data is kept only for as long as necessary for the relevant purpose, legal obligations, dispute handling, and security. Exact infrastructure log retention depends on the hosting configuration and must be confirmed by the owner.

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to certain processing. You may also withdraw consent where processing relies on consent and lodge a complaint with the Spanish Data Protection Agency or another competent supervisory authority.

To exercise these rights, email timegestioni@gmail.com and provide enough information to identify and handle your request.

External service providers may process data in other countries. Their own privacy notices describe the safeguards and transfer mechanisms they use. TimeWebos should review provider terms when production hosting and business accounts are finalized.

Time Studios Group / TimeWebos may use Google Drive within its CRM to create operational folders and archive documents related to client relationships, including contract PDFs and other documents managed through the CRM.

The integration uses the Google Drive scope https://www.googleapis.com/auth/drive.file. This scope provides limited access to the specific files created by the app or used with it; it does not grant indiscriminate access to the user's entire Google Drive.

Only when necessary for these functions, the CRM may access Drive files and documents managed through the app, folders created or managed by the app, and the technical metadata required to operate them, such as file or folder name, ID, parent folder, type, timestamp, or equivalent information. The integration does not request access to email, contacts, or other Google services.

Google User Data is used exclusively to create or locate folders, upload and archive documents, retrieve references required by the CRM, and enable authorized document workflows. It is not used for advertising, advertising profiling, data sales, model training, or purposes unrelated to the requested functionality.

OAuth tokens and credentials are handled server-side, are not publicly exposed in the frontend, and are retained only for as long as necessary to maintain the authorized access. The Google user or account administrator can revoke the authorization through the relevant Google account settings. After revocation, CRM functions that depend on Google Drive may no longer be available.

Google User Data is not sold or transferred to third parties. It may be processed only by technical service providers necessary to deliver the service, when required by law or for security purposes, and as otherwise described in this Privacy Policy.

TimeWebos's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

This policy may be updated when the website, its providers, or legal requirements change. The date at the top of the page identifies the current published version.