Legal notice and privacy

Website owner and operator

AMVARA CONSULTING S.L.
NIF/CIF: ES-B65707994
Gran Via de les Corts Catalanes 636, Princ. 1B
08007 Barcelona, Spain
Website: https://km0digital.com/
Cloud service: https://cloud.km0digital.com/

The content on this website is provided for general information about Kilometer 0 Digital and related services. It does not constitute legal, financial, technical, or professional advice unless explicitly stated.

AMVARA CONSULTING S.L. strives to keep information accurate and up to date but does not guarantee completeness or suitability for any particular purpose. Use of this website is at your own risk.

Links to third-party sites (including WhatsApp, GitHub, KM0 Cloud, and external providers) are provided for convenience. We are not responsible for their content, availability, or privacy practices.

Text, images, software, design, logos, and trademarks on this site are protected by applicable intellectual property laws. Unauthorised reproduction, distribution, or transformation is prohibited without prior written consent from AMVARA CONSULTING S.L.

For legal enquiries: hello.yoel@amvara.de

Data controller: AMVARA CONSULTING S.L. (details above).
Privacy contact: hello.yoel@amvara.de

This policy describes how we process personal data on km0digital.com (marketing site) and cloud.km0digital.com (KM0 Cloud). Legal pages for both properties are hosted on km0digital.com.

Marketing site (km0digital.com)

• Ideas form (/ideas/): message (required), optional name, locale, IP address, and User-Agent. Submissions are posted to a host spool for a few minutes, then automatically destroyed. Your name and message topic are retained in a GitHub Issue on the project repository for triage and follow-up.
• Contact section: no data is stored on the site. Email links open your mail client (hello.yoel@amvara.de).
• WhatsApp group link: you leave our site and join a third-party service operated by Meta. Their policies apply: WhatsApp Privacy Policy.
• Cloud user count (/cloud/): no personal data from visitors. The count is fetched at build time via the OpenCloud Graph API using server-side credentials.
• Server logs: IP address, User-Agent, timestamps, and request metadata in nginx and host access logs for security and troubleshooting (typically retained up to 30 days, or longer if required for incident investigation).

Purposes and legal bases

• Operating the website and KM0 Cloud services (contract and legitimate interest).
• Handling ideas and support requests (legitimate interest and, where applicable, consent).
• Security, abuse prevention, and legal compliance (legitimate interest and legal obligation).

Retention

• Ideas spool files: minutes, then destroyed.
• GitHub Issues from the ideas pipeline: retained while the issue is open and thereafter as project history on GitHub until archived or deleted under GitHub's policies.
• Server access logs: limited period as described above.
• KM0 Cloud account and file data: retained for the life of the account and as required for backups and legal obligations; see the KM0 Cloud section below.

Recipients and subprocessors (verified)

• GitHub (ideas pipeline issue tracking)
• Hetzner (EU hosting, Germany)
• Meta / WhatsApp (optional community link only)
• Let's Encrypt (TLS certificates)
• OpenCloud stack (KM0 Cloud product infrastructure)

Data is primarily processed within the European Union. Where a provider processes data outside the EU, we rely on appropriate safeguards as required by GDPR.

Your rights

Under GDPR you may request access, rectification, erasure, restriction, objection, and data portability where applicable. You may withdraw consent at any time when processing is based on consent. Contact hello.yoel@amvara.de. You may lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

Security

We apply technical and organisational measures including HTTPS, access controls, and operational practices aligned with AMVARA's ISO/IEC 27001:2022 certified management system. See our security page for more detail.

We may update this policy from time to time. Material changes will be reflected on this page with an updated date.

Marketing site (km0digital.com): we do not set cookies on marketing pages today. We do not use analytics or advertising trackers on this site. No cookie consent banner is required for the marketing site in its current form.

KM0 Cloud (cloud.km0digital.com): authentication and session cookies may be set on the cloud domain when you sign in or use the service. These cookies are not loaded on km0digital.com. Session cookies support login and secure access to your account and files.

If we introduce cookies on the marketing site in the future, we will update this section and implement appropriate consent where required by law.

KM0 Cloud (cloud.km0digital.com) is a community OpenCloud instance operated by AMVARA CONSULTING S.L. Legal and privacy information for the cloud service is published on this page on km0digital.com.

Data we process

• Account data: registration details, username, email, and authentication data managed via Dex, LDAP, and related identity components.
• Files and metadata: content you upload, file names, sharing settings, and activity metadata stored in OpenCloud.
• Session and auth cookies: set on cloud.km0digital.com to maintain secure sessions (not on the marketing site).
• Operational logs: access and security logs on EU infrastructure for reliability and incident response.

Hosting and location

Cloud infrastructure runs in the European Union (Germany) on Hetzner. Traffic is encrypted with TLS. Backups and operational details are described in our technical blog where applicable.

Your choices

You can access, correct, or delete your cloud data through the service where supported, or contact hello.yoel@amvara.de for privacy requests related to your KM0 Cloud account.