Explore
Contribute
Social
Language
Policy version: 2026-04-21
This policy explains how we process personal data when you browse StickAtlas, send a contact request, request access to private areas, or use the backoffice and authentication flows associated with the product.
Ribas Rovira SL is the controller for the processing described on this page.
Company
Ribas Rovira SL
VAT / CIF
B66026261
Address
C/Pau Claris 145, 08009 Barcelona, Spain
Contact
polribasrovira@gmail.com
Measure aggregated traffic and understand how the public site is used.
Legal basis: Consent
Retention: Until consent is withdrawn, the cookie expires, or the external analytics retention period reaches 14 months.
Receive, triage, and answer contact requests, corrections, and business enquiries.
Legal basis: Consent and, where applicable, pre-contractual steps or legitimate interest in managing incoming requests.
Retention: For the time needed to answer the request and keep a minimum accountability trail, normally up to 24 months unless a longer legal defense period is required.
Review, moderate, publish when appropriate, and defend rights in relation to shared photos and shared news.
Legal basis: Consent, performance of the submission workflow requested by the user, and legitimate interest in editorial moderation and rights defense.
Retention: While the submission is under review and, if accepted, for the publication lifecycle plus the period needed to defend legal claims or prove authorization.
Manage access to private editorial and administrative areas when user accounts are active beyond the current admin workflows.
Legal basis: Performance of a contract or legitimate interest in operating the private service.
Retention: For the lifetime of the account and the minimum period needed for security and legal accountability.
Audience measurement processor for optional analytics cookies.
Location: United States and other Google processing locations
International transfer: United States. Standard Contractual Clauses and supplementary safeguards documented by Google.
Hosting, CDN, security, and infrastructure processor for web delivery.
Location: Depends on the production deployment configuration
Media storage and upload infrastructure processor for submitted images.
Location: Depends on the configured storage region
International transfer: Depends on the configured AWS region. Contractual and organizational safeguards agreed with AWS.
You can exercise your GDPR rights by using the request form or by writing to the contact email shown below.
Response deadline: one month from receipt, extendable when legally justified.