Legal

Privacy Policy

Last updated: October 2026

At Kangaroo Media S.L. (operating under the brand Komparoo), we take the privacy of our users, collaborators, and visitors very seriously. This Privacy Policy explains how we collect, use, and protect the personal data provided through our corporate website komparoo.io, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD).

1. Data Controller

Company name: Kangaroo Media S.L.
Tax ID (CIF): ESB26923219
Registered address: Julián Rabanedo 40, 28045 Madrid, Spain
Contact email: info@komparoo.io

2. What Data We Process and Why

We only process the personal data we need for each of the purposes below. For each one, we explain what data we use, why, on what legal basis and for how long we keep it.

Contact form

Data: the type of contact you choose (brand, agency, affiliate network or other), your name, work email, company, website (optional) and your message. The fields marked with an asterisk are needed to reply to you; without them we cannot handle your request.
Purpose: to reply to your request. Your message reaches us only by email at info@komparoo.io, sent through Amazon Simple Email Service (Amazon SES) in a European Union region. We do not add your details to the newsletter list or to any other mailing list.
Legal basis: taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in answering the enquiries we receive (Article 6(1)(f) GDPR).
Retention: for as long as we need to handle your request and, at most, 12 months from our last communication, unless a business relationship arises from it. In that case, we keep the data for as long as the relationship lasts and, afterwards, for the periods required by law.

Spam protection in our forms

Service: Cloudflare Turnstile, provided by Cloudflare, Inc. It is only loaded when you start using the contact form or the newsletter form, never while you simply browse the Website.
Data: your IP address and technical signals from your browser and device, which Cloudflare analyses to tell people apart from automated programs (bots).
Legal basis: our legitimate interest in keeping our forms secure and free of spam (Article 6(1)(f) GDPR).
Retention: we do not store these signals; we only receive the result of the check. Cloudflare explains how it processes them in its Turnstile privacy addendum.

Website analytics (only with your consent)

Service: Google Analytics 4, loaded through Google Tag Manager, both provided by Google Ireland Limited.
Data: the pages you visit and how you use them, your approximate location (derived from your IP address), information about your device and browser, and an online identifier stored in the _ga and _ga_<id> cookies.
Purpose: to measure how the Website is used so that we can improve it. We do not use this data for advertising.
Legal basis: your consent (Article 6(1)(a) GDPR and Article 22.2 LSSI-CE). Until you give it, nothing from Google is loaded: we use Google’s Consent Mode v2 in its basic form. You can withdraw your consent at any time through the “Cookie settings” link at the bottom of every page.
Retention: the cookies last up to 2 years. Google keeps the analytics data for the retention period set in our Google Analytics account, which is 14 months at most.

Hosting and delivery of the Website

Provider: Amazon Web Services (AWS). The Website is stored in the AWS region in the European Union (Stockholm) and delivered through the Amazon CloudFront content delivery network.
Data: your IP address and the technical details of each request (page requested, date and time, browser), which are needed to deliver the Website to you securely.
Legal basis: our legitimate interest in offering a secure and reliable website (Article 6(1)(f) GDPR).
Retention: we do not keep logs of your visits, and the Website does not set its own session cookies.

Data: your email address, the language of the page where you subscribe, the market you have chosen, the country estimated from your IP address, and the IP address and time of your subscription and of your confirmation, which serve as proof of your consent.
Purpose: to send you news and information about Komparoo when we have something relevant to share. There are no scheduled periodic mailings.
Legal basis: your consent (Article 6(1)(a) GDPR), which you give by ticking the box and confirming your subscription from the email we send you (double opt-in). You can unsubscribe at any time through the link included in every email or by writing to info@komparoo.io.
Providers: Amazon Web Services sends the confirmation email (Amazon SES, in a European Union region). Once you confirm, Mailchimp (The Rocket Science Group LLC, an Intuit Inc. company based in the United States) manages the subscriber list and sends the emails on our behalf.
Retention: until you unsubscribe. After that, we keep only the record of your consent and of your unsubscription, for as long as we may need to prove them.

We also save your cookie choice and, if you pick one, your market in your browser’s local storage. The Cookie Policy explains both.

3. Who We Share Your Data With

We do not sell your data or share it with third parties for their own purposes, apart from the limited use Cloudflare makes of the spam-protection signals, explained below. To run the Website we rely on these providers, which process data on our behalf under data processing agreements (Article 28 GDPR):

Amazon Web Services: hosting and delivery of the Website, and sending by email of the contact form and of the newsletter confirmation email (Amazon SES).
Cloudflare, Inc.: spam protection in the contact and newsletter forms. Cloudflare also uses these signals, as an independent controller, to improve its bot detection.
Google Ireland Limited: website analytics, only if you consent.
The Rocket Science Group LLC (Mailchimp): management of the newsletter subscriber list and sending of the newsletter, only if you subscribe.

We may also disclose your data to public authorities, courts and other bodies when the law requires it.

4. International Transfers

We store and process your data in the European Union, with these exceptions: Cloudflare, Inc. may process the Turnstile signals in the United States; Google may transfer analytics data to Google LLC; and, if you subscribe to the newsletter, your subscription data are stored by The Rocket Science Group LLC (Mailchimp) in the United States. These three companies are certified under the EU-US Data Privacy Framework, which the European Commission recognised as providing an adequate level of protection in its decision of 10 July 2023. If any other provider processes data outside the European Economic Area, it does so under the European Commission’s Standard Contractual Clauses.

5. Your Rights

You have the right to:

Access your personal data.
Request rectification or deletion of your data.
Restrict or object to its processing.
Request data portability.
Withdraw your consent at any time, without affecting the lawfulness of the processing carried out before you withdrew it.
Lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

You may exercise these rights by writing to info@komparoo.io with the subject line "Data Protection".

6. Data Security

We implement appropriate technical and organisational measures to ensure the security of your personal data and to prevent unauthorised access, alteration, disclosure, or loss.

The Website is only served over an encrypted connection (HTTPS).

7. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on this page with its corresponding effective date.