Privacy Policy
www.annarodriguezcasadevall.com
- PRIVACY POLICY AND DATA PROTECTION
In compliance with current legislation, Anna Rodriguez Casadevall (hereinafter also referred to as the «Website») is committed to adopting the necessary technical and organizational measures appropriate to the security level required for the data collected.
Laws Incorporated into This Privacy Policy
This privacy policy is adapted to current Spanish and European regulations on personal data protection. Specifically, it complies with the following laws:
- Regulation (EU) 2016/679 of the European Parliament and the Council, of April 27, 2016, concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data (GDPR).
- Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
- Royal Decree 1720/2007, of December 21, approving the regulations implementing Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).
- Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).
Identity of the Data Controller
The Data Controller responsible for the processing of personal data collected through the Website is:
- Name: Anna Rodríguez Casadevall
- NIF: 47807685T
- Address: C/ Joaquim Sagnier – 08470 Sant Celoni (Barcelona)
- Contact phone number: 687802733
- Contact email: hello@annarodriguezcasadevall.com
Personal Data Registration
In compliance with the GDPR and the LOPD-GDD, we inform you that the personal data collected through the forms on this Website will be incorporated into our records for the purpose of facilitating, streamlining, and fulfilling the commitments established between Anna Rodriguez Casadevall and the User, or to maintain the relationship established in the forms filled out by the User, or to respond to a request or inquiry.
In accordance with the GDPR and LOPD-GDD, unless an exception applies under Article 30.5 of the GDPR, a record of processing activities is maintained, detailing the processing activities carried out and other established circumstances.
Principles Governing the Processing of Personal Data
The processing of personal data of the User is subject to the following principles as outlined in Article 5 of the GDPR and Articles 4 and subsequent of Organic Law 3/2018:
- Lawfulness, fairness, and transparency: User consent is required, with full transparency on the purposes of data collection.
- Purpose limitation: Data will be collected for specified, explicit, and legitimate purposes.
- Data minimization: Only strictly necessary data will be collected for the stated purposes.
- Accuracy: Data must be accurate and kept up to date.
- Storage limitation: Data will only be retained as long as necessary for processing.
- Integrity and confidentiality: Data will be processed securely and confidentially.
- Accountability: The Data Controller is responsible for ensuring compliance with these principles.
Categories of Personal Data
The only categories of personal data collected by Anna Rodriguez Casadevall are identification data. No special categories of data, as defined by Article 9 of the GDPR, are processed.
Legal Basis for Processing Personal Data
The legal basis for processing personal data is User consent. The Website is committed to obtaining explicit and verifiable consent before processing User data for one or more specific purposes.
The User has the right to withdraw their consent at any time, and withdrawal will not affect the lawful processing conducted prior to withdrawal.
If the User provides data through forms for inquiries, requests, or interactions, they will be informed if providing such data is mandatory for proper service provision.
Purpose of Data Processing
Personal data collected by the Website is used to:
- Facilitate, streamline, and fulfill commitments between the Website and the User.
- Maintain relationships established through form submissions.
- Respond to inquiries or requests.
- Conduct personalized, operational, and statistical marketing activities.
- Improve the quality and navigation of the Website.
Users will be informed at the time of data collection about the specific purpose(s) of the processing.
Data Retention Periods
Personal data will be retained only for the minimum time necessary for processing purposes or until the User requests deletion. Users will be informed about the retention period or the criteria used to determine it when data is collected.
Recipients of Personal Data
Personal data will not be shared with third parties. If this policy changes, Users will be informed of any recipients or categories of recipients at the time of data collection.
Personal Data of Minors
In accordance with the GDPR and Organic Law 3/2018, only individuals over 14 years old may legally consent to the processing of their personal data by the Website. For minors under 14, parental or guardian consent is required.
Data Security and Confidentiality
The Website is committed to implementing technical and organizational measures to ensure the security and confidentiality of personal data and prevent accidental or unlawful destruction, loss, alteration, unauthorized access, or disclosure.
The Website uses SSL (Secure Socket Layer) encryption, ensuring that data transmission between the server and the User is fully encrypted and secure.
However, since internet security is not absolute, the Website cannot guarantee that unauthorized third parties (e.g., hackers) will not access data fraudulently. If a security breach occurs that poses a high risk to User rights, Users will be informed without undue delay.
All personal data will be treated as confidential, and employees or associates handling such data will be legally or contractually required to maintain confidentiality.
User Rights
Users may exercise the following rights under the GDPR and Organic Law 3/2018:
- Right of access: To obtain confirmation of data processing and access to personal data.
- Right to rectification: To correct inaccurate or incomplete personal data.
- Right to erasure («Right to be forgotten»): To delete personal data when it is no longer necessary, consent is withdrawn, or data is unlawfully processed.
- Right to restriction of processing: To limit data processing under certain conditions.
- Right to data portability: To receive personal data in a structured, commonly used format and transfer it to another controller.
- Right to object: To stop personal data processing.
- Right not to be subject to automated decision-making, including profiling.
Users can exercise these rights by sending a written request with:
- Name, surname, and a copy of the ID.
- A specific request outlining the right being exercised.
- Address for notifications.
- Date and signature.
Requests should be sent to:
- Postal address: C/ Joaquim Sagnier – 08470 Sant Celoni (Barcelona)
- Email: hello@annarodriguezcasadevall.com
Third-Party Website Links
The Website may contain links to third-party websites, which have their own privacy policies. The Website is not responsible for the privacy practices of external sites.
Complaints to Regulatory Authorities
If Users believe their data is being misused, they may file a complaint with the Spanish Data Protection Agency (www.aepd.es) or the relevant supervisory authority in their country.
II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY
By using the Website, the User accepts this Privacy Policy.
The Website reserves the right to modify this policy without prior notice. Users are encouraged to review this page periodically.
Last updated: February 14, 2025.