Privacy policy
How ONE uses your data. Updated 15 September 2026.
Controller and contact
CHANGE IS BOARDING S.L., tax ID B60053105, Av. Sarrià 67, 7th floor, door 3, 08029 Barcelona, Spain, controls the personal data managed by ONE. Privacy, rights and support: hello@chooseasone.com. Partnerships: partners@chooseasone.com.
Accounts and requests
We process your email and the needs, country, budget, preferences and request status you provide to deliver your requested service and take steps towards a possible contract (GDPR Article 6(1)(b)). Saving a need or requesting information is not a purchase and does not authorise advertising. Required fields are needed for the relevant function.
Ask and artificial intelligence
When you choose to chat with Ask, we send the conversation messages to the OpenAI API to answer and recommend groups. You can use the catalogue without that conversation. Do not send health data, identity documents, passwords or banking details. The model cannot publish contracts or make contracting decisions for you. ONE records usage to enforce limits; the conversation stays in the page and only the content you confirm in the separate request form is saved as a request. The OpenAI request sets store:false; this does not mean the provider has no security logs.
Security and support
We use session data, technical logs and information you send to protect the service, prevent abuse and resolve incidents. Our basis is the legitimate interest in running a secure service (GDPR Article 6(1)(f)), subject to your rights. Legal obligations rely on Article 6(1)(c). Support records must not contain passwords or full card details.
Suppliers and contracting
For negotiations we share group needs and volumes, avoiding identification where unnecessary. Before processing an offer, we explain who the seller is, which data is needed and why. Data necessary for a contract you request may be shared on a precontractual or contractual basis; separate permission is requested for other uses requiring it. Each offer explains where contracting and payment take place. Not all campaigns use Stripe or allow checkout inside ONE.
Technical providers and transfers
We use Render for hosting, cdmon for email and OpenAI for Ask conversations you request. Technical providers may process data to supply their functions. Processing may involve access outside the European Economic Area; transfers must be covered by an adequacy decision or GDPR safeguards such as standard contractual clauses. Ask hello@chooseasone.com for information about applicable safeguards. The database location does not mean all processing takes place exclusively in Europe.
Retention
We keep account and request data while needed to deliver the requested service. When you request closure or the purpose ends, we review what can be deleted and what must remain restricted for legal obligations or claims during applicable periods. Support enquiries remain while being resolved and while necessary to document their handling. Marketing objections remain on a suppression list to avoid further contact. Backups have their own replacement cycle and are not used as contact lists. There is no single retention period for all data.
Your rights
You may request access, correction, erasure, objection, restriction and portability where applicable at hello@chooseasone.com. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. We request only information necessary to verify identity. We respond within GDPR deadlines, normally one month, with justified extensions where permitted. You may complain to the Spanish Data Protection Agency at www.aepd.es or your competent supervisory authority.
Professional contacts
To explore partnerships, we may obtain professional details from the company, its website or programmes inviting proposals. The relevant message explains the context and source. A public email alone is not treated as permission for advertising. Object by replying or writing to partners@chooseasone.com. We do not sell personal data lists.
Cookies and local storage
ONE uses session and security cookies, your chosen language preference and technical application storage. See the cookies page for details. Third-party services you choose to visit apply their own policies.