Privacy Policy

Amalia López Acera (hereinafter, the owner), is the person responsible for the processing of personal data and the owner of the website https://amalialopezacera.com (hereinafter, “the website”).

The owner guarantees the protection of all personal data provided by the user on the website.

According to the provisions of the previous paragraph, you are informed that:

In compliance with the provisions of Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, as well as the current legislation in force regarding data protection contained in Regulation (EU) 2016/679 of the European Parliament and Council, we inform you that by completing this form you are giving your express consent, as well as for all personal data provided by the user on the website, for these to be incorporated and processed in a record of personal data processing activities created for this purpose and maintained under the responsibility of the owner.

Identity of the Person Responsible for the Processing of Your Personal Data

• Identity of the owner: Amalia López Acera
• NIE: 08111685E
• Address: Urbanización Rosales Park. Partida Gargasindi, 10 C.P: 03710, Calpe (Alicante).
• Email: contacto@amalialopezacera.com

Purposes and Retention Period of Personal Data

By completing the forms and other communication methods present on the website, the user gives their express consent for the requested personal data to be incorporated and processed in the record of personal data processing activities created for this purpose and maintained under the responsibility of the owner.

For the purposes of current legislation, the personal data you send me through the website forms will receive the data treatment category of “Website users”.

The legal basis for processing your data is: your consent. Prior consent from users is always required to process their personal data for the purposes indicated.

The personal data provided will be retained: Until the data subject requests its deletion.

No categories of specially protected data are processed on the website.

This website includes an SSL certificate. This is a security protocol that ensures your data travels intact and securely, that is, the transmission of data between a server and web user, and in feedback, is fully encrypted.

The data collection forms, their purposes, and retention periods are as follows:

• Automated collection and processing of personal data as a result of browsing the pages of the website (you can consult the cookie policy).
• Commercial relationship with the client. The retention period will be as necessary for processing. Contracts and invoices five and ten years, respectively.
• Attend to, manage, and resolve inquiries, questions, proposals, requests for quotes, and any other information requested by the data subject (contact form). Personal data for this purpose are provided through the contact form. Retention period: as long as the processing for managing inquiries lasts.
• Through the contact form mentioned in the previous paragraph, the automated collection and processing of personal data is carried out as a consequence of the inquiry, request, or subscription to any service(s) offered by the owner of the website.

Retention time: for as long as the processing lasts, unless the user exercises their cancellation rights earlier.

• Subscription to the page to receive new blog entries, as well as other information of interest related to the website’s theme through Substack. The subscription is also done by filling out the newsletter form. Retention time: for as long as the processing lasts, unless the user exercises their cancellation rights earlier.
• Managing blog comments, through the form that enables such comments. Retention time will be as long as the processing lasts for comment management and moderation.
• Google Analytics tracking systems, to study user preferences, demographic characteristics, traffic patterns, and other aggregated information to better understand who makes up the audience and what they need. Tracking our users’ preferences also helps us show the most relevant advertisements.
• Due to the use of Google Fonts on the website, some of your data, such as IP address, may be processed to provide the appropriate service.

Legal Basis for the Processing of Personal Data

The processing of personal data carried out by the owner through the website is based on consent. The consent given by the data subject is express, free, specific, informed, and unequivocal.

In collecting and processing personal data, appropriate security measures have been adopted to prevent loss, unauthorized access, or manipulation, in accordance with the legislation mentioned above.

The owner commits to protecting the confidential information they have access to.

Recipients

The owner commits that personal data will not be shared or transferred to third parties without the express consent of users. However, the provision of certain services may require data transfers to third countries or entities for infrastructure management or service provision, such as managing electronic newsletters. In these cases, hosting is guaranteed within European Union countries (and therefore compliance with the European General Data Protection Regulation).

In the case of data transfer to countries outside the European Union:

• Standard contractual clauses are used to guarantee the transfer of personal data between controllers to a third country.
• Explicit consent will be required, after informing of possible risks, due to the absence of an adequacy decision and appropriate safeguards, as established in article 49 of the GDPR.
• Companies adhere to the EU-US Data Privacy Framework (DPF).

For example, the website’s hosting is by OVH, based in Dublin. You can consult their personal data protection policy at https://www.ovh.es/proteccion-datos-personales/, as well as their data processing contract.

The email marketing platform is Substack, based in the USA and adherent to the EU-US Data Privacy Framework (DPF). You can consult their privacy policy at https://substack.com/privacy.

Under no circumstances will the transfer of these data involve use beyond the consent expressed for the purposes and conditions present in this privacy policy.

1. 1. In the event that you provide us with personal data of other individuals without informing the data subject, you do so with their express consent and after having been informed, beforehand, of the terms contained in this clause. Likewise, we ask that you notify us of any changes that may occur in the data provided.The data subject is not responsible for the transfer of third-party data whose consent has not been given or who are unaware of the contents of this clause, with responsibility lying with the person who transfers such data to the website owner.
2. If the required data is not provided, the services on the website may not be fully available. Failure to provide the required data in the contact form will prevent the requested services from being satisfactorily carried out. Refusal to accept the cookie policy may result in the loss of website functionalities.
3. The user certifies that they are over 14 years old and therefore have the legal capacity necessary to give consent regarding the processing of their personal data, all in accordance with the provisions of this Privacy Policy.
4. The user always has the possibility to exercise the ARCO-POL Rights by contacting contacto@amalialopezacera.com via email or by postal mail at Urbanización Rosales Park. Partida Gargasindi, 10 C.P: 03710, Calpe (Alicante).
5. The data subject has the right to receive the personal data concerning them, which they have provided to a data controller, in a structured, commonly used and machine-readable format, and has the right to transmit such data to another data controller without impediment from the data controller to whom the data was provided.
6. Under certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain the data for the exercise or defense of claims.
7. In the event that consent has been given for a specific purpose, the data subject has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
8. Data subjects may file a complaint with the competent Data Protection Supervisory Authority if they have not obtained satisfaction in exercising their rights.
9. The express consent given when filling out the registration form also includes the following:
   • The data controller reserves the right to subcontract employees to provide various services for the proper development and organization of the website’s activity.
   • Likewise, the data controller reserves the right to hire third parties for the processing and management of legislative matters in general and those related specifically to data protection. In all these cases, the data controller will require the contracted company and/or individual professional and those responsible for managing the processing of the personal data provided to sign a confidentiality agreement to ensure the privacy of such information.
   • The user consents to the transfer of their personal data when requested by competent administrative authorities or by judicial order.
10. The user authorizes the processing of the personal data provided to the data controller under the terms established in this clause.
11. The data controller reserves the right to modify this privacy policy to adapt it to legislative or jurisprudential changes, as well as industry practices. In such cases,I will announce on this page the changes introduced with reasonable notice before their implementation.