Privacy Policy

In compliance with the Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), the Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016 (hereinafter, GDPR), and the Registration Data Policy of ICANN (published on 21-02-2024, effective from 21-08-2025), this Privacy Policy regulates the processing of personal data that SOLUCIONES CORPORATIVAS IP, S.L. –hereinafter, SCIP or DonDominio– carries out, as Controller and/or Processor, in relation to the information that users and/or clients (natural persons) provide:

• as a consequence of the procurement and management of the services marketed by SCIP (hereinafter, the "Services"; and
• specifically, in the registration, transfer, and maintenance of gTLD domain names, as provided in the aforementioned Registration Data Policy and the ICANN Registrar Accreditation Agreement.

If You do not accept the terms of this Policy, please refrain from accessing and/or using the Services. This Policy does not apply to products, services or activities provided by third parties unrelated to DonDominio.

Accuracy and Lawfulness of Data. Unless acting under a valid legal representation, no user and/or client may use someone else's identity or communicate third-party data. The data provided to SCIP must be personal, truthful, accurate, current, adequate, and relevant to the purpose for which they are collected. The user and/or client will be solely responsible for any direct or indirect damage caused to third parties or to SCIP from providing false, inaccurate, outdated, inadequate, or irrelevant data. Anyone providing data on a third party states that they have obtained prior consent or legal authorization and assume any liability in case of the contrary.

Capacity and Minors. The user and/or client who communicates data to SCIP declares to be of legal age and to have full capacity to act according to Spanish law. Any data relating to minors will require the prior authorization of their parents, guardians, or legal representatives, who will be considered responsible for the accuracy and lawfulness of the data provided by the minors under their charge.  

DATA CONTROLLER

•   Corporate Name: SOLUCIONES CORPORATIVAS IP, S.L.,(SCIP or DonDominio)
•   Trade Name: DONDOMINIO    
•   Address: C/ Menestrals, 14, C.P. 07500 de Manacor (Illes Balears), Spain
•   NIF: B57333601
•   Email: info@scip.es
•   Registration data: Registered in the Mercantile Register of Baleares Volume 2120, Book 0, Folio 173, Sheet PM-50105
•   Data Protection Officer (DPO) SCIP has an external Data Protection Officer, appointed in accordance with Art. 37 and 38 GDPR, whose contact address is: dpo@scip.es

PURPOSES OF DATA PROCESSING

The personal data you provide us –identifying data (name, surname, DNI/NIE), contact data (postal address, telephones, email) and, where applicable, the registration data fields required by ICANN's Registration Data Policy (see Annex I)– will be processed for the management and control of the legal relationship binding you to SOLUCIONES CORPORATIVAS IP, S.L. (DonDominio or SCIP), and specifically for the purposes detailed below:

1. Provision and maintenance of the Services: Manage the registration, access, technical configuration, billing, renewal, transfer, and proper use of the Services contracted, according to their nature and conditions.

2. User/Customer Support: Communicate with you and respond to incidents, requests, comments, or queries you raise through our channels (web forms, chat, phone, or email).

3. Operation and security of the platform: Provide, update, maintain, and protect our websites, infrastructures, and internal processes, ensuring their secure operation and the integrity of the registered domain names.

4. Registration of gTLD domain names: Process the registration, renewal, transfer, suspension, or cancellation of domain names, according to the ICANN Accreditation Agreement and the Registration Data Policy. Note: Data declared as “redacted” in the RDDS/WHOIS will remain non-public unless a disclosure request is processed in accordance with the procedure in Annex II.

5. Service offers and improvements: Send you –by electronic or non-electronic means– proposals for new products, functional updates, or offers linked to Services already contracted. Such communications are based on SCIP’s legitimate interest in retaining and improving the experience of its customers; you can object at any time.

6. Mandatory operational communications: Send notices related to expirations, technical incidents, scheduled maintenance, or essential contractual changes. These communications are inseparable from the service and cannot be waived.

7. Marketing and surveys (prior consent): With your express authorization, conduct satisfaction surveys or send you commercial information about own or third-party related services. Consent can be withdrawn at any time through the mechanism indicated in each communication.

8. Staff or collaborator selection processes: Manage your application when participating in job offers or collaborations published by SCIP.

9. Processing on behalf of the client: When, to execute a service, SCIP must access personal data for which the client is Controller or Processor, such data will be processed strictly as Data Processor, in accordance with Article 28 GDPR and the corresponding data processing agreement.

SCIP will not process your data for purposes other than those described herein, except for legal obligations or judicial requirements.

Completing the forms marked with an asterisk (*) is mandatory to be able to attend to your request or provide the service. Failure to supply the required data –or subsequent withdrawal of consent in cases where it serves as the legal basis– may prevent the correct provision of the service or the attention of your request.

By providing your data, you guarantee its truthfulness, accuracy, and timeliness and expressly consent to its processing in accordance with the purposes indicated above.

DATA RETENTION (DURATION OF DATA PROCESSING)

After the indicated periods, the data will be blocked and retained solely to address potential administrative, civil, or criminal liabilities, finally being securely deleted. DonDominio will not retain the data for longer than strictly necessary for each purpose unless legally obligated or required by court order.

LEGAL BASIS FOR PROCESSING.

The processing of your personal data is based, depending on the nature of each operation, on the legal bases provided in Article 6 of the GDPR:

a) Execution of a contract (Art. 6.1 b) GDPR). It is essential to manage registration, provision, billing, renewal, transfer, or cancellation of the contracted Services, as well as formalizing and maintaining the gTLD domain names registration according to the ICANN Accreditation Agreement and the Registration Data Policy.

b) Compliance with legal obligations (Art. 6.1 c) GDPR). Certain processing is carried out because the regulation requires it: fiscal and accounting obligations, data retention (Law 25/2007), duties imposed by the Registration Data Policy or by requests from administrative and judicial authorities.

c) Legitimate interest of DonDominio (Art. 6.1 f) GDPR). We use your data to ensure our platform and the Domain Name System's security and stability, improve and customize our services, handle claims or inquiries, conduct satisfaction surveys, and offer similar products or services to those you already enjoy. This legitimate interest is weighed against your rights and expectations, always offering a simple mechanism to object.

d) Consent of the data subject (Art. 6.1 a) GDPR). When the regulation demands it, we request your prior authorization —for example, for sending commercial communications or including your application in future selection processes—. You can withdraw that consent at any time without retroactive effects on already conducted processing.

RECIPIENTS OF COMMUNICATIONS AND DATA TRANSFERS

General Character. DonDominio will neither transfer nor communicate your personal data to third parties, except (i) there is a legal obligation, (ii) it is necessary for the correct provision of the contracted service, or (iii) with your express consent.

Domain Name Registration Services. To process the registration, renewal, or transfer of a gTLD domain (or a ccTLD, as applicable), it is indispensable to communicate certain data to the competent registry entity —the corresponding Registry Operator— and, when required by ICANN regulation, to:

• ICANN and its Data Escrow service (registration data custody);

• the national or international authority managing the territorial extension (ccTLD);

• technical providers acting as Data Processors (e.g., payment gateways or messaging platforms).

In these cases, DonDominio transmits solely the indispensable data fields, defined in ICANN’s Registration Data Policy, exclusively aimed at formalizing and maintaining the registration.

The complete list of domain extension management entities can be consulted in the public directory of the IANA: https://www.iana.org/domains/root/db. The Internet Assigned Numbers Authority oversees, among others, the DNS root servers and global IP address allocation.

International Transfers. Some Registry Operators or providers may be located outside the European Economic Area. When it is necessary to transfer data to a country without an adequacy decision from the European Commission, DonDominio applies the Standard Contractual Clauses 2021/914/UE and, if applicable, additional technical measures (encryption, pseudonymization) to ensure a level of protection equivalent to that in Europe.

Credit Information Systems. In case of non-payment or delinquency of due amounts, DonDominio may communicate the necessary data to the ICIRED asset solvency file or another credit information system that complies with the RGPD and LOPDGDD, solely for managing collection and third-party credit risk assessment with legitimate interest.

Consent Effect. By accepting the Service Conditions, you expressly authorize the indicated transfers and communications as inherent to the service. If you withdraw this consent, DonDominio will no longer be able to provide the Services requiring such communication.

RIGHTS OF DATA SUBJECTS.

In accordance with Articles 15 to 22 of the GDPR, you may:

- Access the personal data processed by DonDominio.

- Rectify inaccurate or incomplete data.

- Erase the data when no longer necessary or under the Article 17 GDPR circumstances.

- Object to the processing or request its restriction when appropriate.

• Request the portability of the data you provided.

• Request not to be subjected to automated individual decisions, including profiling.

When the legal basis is consent, you may withdraw it at any time without retroactive effects. Certain rights may be temporarily restricted when applicable obligations require maintaining the data (e.g., ICANN’s Registration Data Policy) or upon authority request.

Contact Data to Exercise These Rights: SCIP, applying Articles 37 and subsequent of Regulation (EU) 2016/679 of April 27, 2016 (GDPR), has appointed an officially designated Data Protection Officer to the Supervisory Authority, whose contact information is:

SOLUCIONES CORPORATIVAS IP, S.L. (Data Protection Officer) C/ Menestrals, 14, 07500 Manacor (Illes Balears) – Spain Email: dpo@scip.es

Complaint with Supervisory Authority. If you consider your rights have not been addressed, you may file a complaint with the Spanish Data Protection Agency (https://www.aepd.es).

ADDITIONAL INFORMATION

Traffic Data Retention (Law 25/2007). In accordance with Law 25/2007, DonDominio must retain certain data related to traffic and location resulting from electronic communications for the legally foreseen period, solely to make them available to competent authorities upon formal request.

Limited Publication in RDDS/WHOIS (Registration Data Policy). For gTLD domain registrations, only fields designated as “public” by ICANN’s Registration Data Policy (e.g., domain name, registrant’s country, registrar identifier, and abuse contacts) will be published in the RDDS/WHOIS directory. The remaining personal data will be displayed as redacted; their disclosure to third parties can only occur via the stipulated request procedure in said policy.

Security Measures. DonDominio implements appropriate technical and organizational measures to:

ensure the confidentiality, integrity, availability, and continued resilience of systems and data processed;

• restore data and access in the event of a physical or technical incident;

• regularly verify and evaluate the effectiveness of implemented measures;

• pseudonymize and encrypt personal data when necessary.

These guarantees are periodically reviewed and kept up-to-date as required by Article 32 GDPR.

ANNEX I - gTLD DOMAIN REGISTRATION DATA

ANNEX II - NON-PUBLIC DATA DISCLOSURE PROCEDURE

1) Application Submission: Send to abuse@scip.es from a verifiable account, indicating:

a) Affected Domain

b) Applicant's identity and proof of authorization (e.g., court order, right to judicial protection, cyber-abuse investigation, etc.).

c) Specific data requested and motivation.

2) Acknowledgment (≤ 5 business days): DonDominio confirms receipt and assigns a file number.

3) Assessment (≤ 30 calendar days). Considerations are:

a) Legal basis invoked and proportionality.

b) The privacy rights and expectations of the data subject.

c) Misuse risk.

4) Reasoned Decision a) Partial/total Approval: the requested data are provided through a secure channel.

b) Denial: the reasons and the appeal channel are indicated.

5) Registration and Custody: All requests, decisions, and accesses are recorded and kept for 15 months (art. 15 RDP).icann.org

6) Appeal: The applicant may appeal to the Spanish Data Protection Agency or ICANN Compliance if they disagree with the decision.