GENERAL DATA CONTROLLER STATEMENT

Cristina Van Roy Rathe is responsible for processing the data collected through this website and data sent by email, telephone or in person.

PURPOSES OF PROCESSING

Customer data is processed to provide contracted services, maintain communications and manage the related activities. Contact, supplier and collaborator data is processed to manage communications and administration. Employee data is processed to manage the employment relationship and its administrative, tax and labour obligations. Data from people who are not yet customers is processed to respond to information requests.

LEGAL BASIS

Processing is based on the contractual or pre-contractual relationship where applicable and, where required, the data subject’s explicit consent. Sending information through this website or the published email address constitutes express consent for the stated purpose.

DISCLOSURES

Data is disclosed only where required by law or necessary to provide the service, including public authorities, banks, printers, audiovisual production providers, designers and other service providers. Suppliers are required to comply with data-protection obligations.

RETENTION

Data is processed while the relevant service or relationship continues and may be retained for the statutory periods applicable to civil, commercial, tax and employment obligations, with appropriate security measures.

INTERNATIONAL TRANSFERS

The website uses professional hosting and cloud services. Where data is transferred internationally, the transfers are carried out with the safeguards required by applicable data-protection law.

DATA SUBJECT RIGHTS

Under the GDPR, you may request access, rectification, erasure, restriction, objection and portability, and withdraw consent. Send a written request with proof of identity to tinavanroy@gmail.com. You may also lodge a complaint with the Spanish Data Protection Agency.