Privacy Policy

At Instruement, we provide our updated Privacy Policy and information about how we use the personal data you provide through this website.

1. Identification

Owner: Adrián Ortiz Arandes
TaxID/VAT: ESX6161158X
Registered office: C/ Bienvenido 16, 18193 Monachil (Granada), España
Website: instruement.com

2. Information and consent

In accordance with the General EU Regulation 679/2016 on Data Protection (hereinafter, “GDPR”) and the Organic Law 3/2018, of December 5, on Data Protection and Guarantee of Digital Rights, by accepting this Privacy Policy, the web user (hereinafter, the “User”) gives their informed, express, free and unequivocal consent to process the personal data collected through the website instruement.com and its platform app.instruement.com (hereinafter, collectively “INSTRUEMENT”), which offers both public information and access to our digital platform for instrument certification.

The User consents to the processing of this data by INSTRUEMENT to provide its services by applying the organizational and security measures required by the GDPR. The personal data requested from the User on the Website are necessary for the provision of the corresponding services.

3. Origin, purpose and legal basis

The User’s personal data will be treated confidentially and will be incorporated into the corresponding processing activity. The processing activities are as follows:

3.1. Authentication and platform access

  • Origin: Data provided by the User during the authentication process at app.instruement.com.
  • Legal basis: Performance of a contract (Art. 6.1.b GDPR).
  • Purpose: Authentication and secure access to the platform.
  • Authentication methods:
    • OTP verification by email
    • Authentication through identity providers (Google, Apple, Facebook)
    • Connection through blockchain wallets (Metamask, Trust Wallet, etc.)
  • Data collected: Email address for OTP, public wallet address for Web3 authentication. In case of social authentication, only the email verified by the provider.
  • Retention: During the active period of use of the platform.
  • Security: Instruement does not store traditional credentials (username/password), using instead secure authentication methods through trusted third parties and blockchain technology.

3.2. Contact via form

  • Origin: Data provided by the User through the contact form or by email.
  • Legal basis: User consent (Art. 6.1 GDPR).
  • Purpose: To address and respond to inquiries requested by the User.
  • Data collected: Name and email, as well as the information the User provides in their message.
  • Retention: The data will be kept for the period strictly necessary to fulfill the purpose, with a maximum of 1 year.

3.2. Newsletter

  • Origin: Data provided by the User through the subscription form.
  • Legal basis: User consent (Art. 6.1 GDPR).
  • Purpose: Sending information about updates, services, and publications from Instruement.
  • Data collected: Email address.
  • Retention: Until the User withdraws their consent or the purpose for which they were collected ends.

3.4. Professional database of luthiers

  • Origin: Professional verification process and public commercial information.
  • Legal basis: Legitimate interest (Art. 6.1.f GDPR) and contract implementation.
  • Purpose: Verification and management of professional profiles of luthiers on the platform.
  • Data collected:
    • Public commercial information (business name, website, email)
    • Establishment address
    • Professional contact details
    • Professional verification information
  • Retention: As long as the professional activity is maintained or until removal is requested.

4. User data

The User commits to ensuring that the data provided is true, accurate, complete, and up-to-date, being responsible for any damage, direct or indirect, that may be caused as a consequence of the breach of such obligation.

5. Exercise of rights

In accordance with the GDPR, the User can exercise their rights of access, rectification, deletion, opposition, data portability, and limitation of processing by contacting privacy@instruement.com, indicating their full name and ID document number.

The User can also file a complaint with the Spanish Data Protection Agency.

6. Cookie policy

INSTRUEMENT exclusively uses functional cookies that are strictly necessary for the basic operation of the Website and the platform. We do not perform any passive tracking or allow third-party cookies for tracking user activity.

7. Acceptance of the privacy policy

The User acknowledges and accepts having read and understood this Privacy Policy, the content of which constitutes the entirety of the agreement between the User and Instruement regarding the use and processing of their personal information.

Last updated: February 2025