In accordance with current legislation, Alba Escayo (hereinafter also referred to as the Website) commits to adopting the necessary technical and organizational measures, appropriate to the level of security required by the risk of the collected data.
This privacy policy is adapted to current Spanish and European regulations on the protection of personal data on the internet. Specifically, it complies with:
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
Royal Decree 1720/2007, of 21 December, which approves the regulation implementing Organic Law 15/1999, of 13 December.
Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).
The data controller for the personal data collected through this Website is: Alba Escayo, with NIF: 71887431B (hereinafter, the Data Controller). Contact details:
Address: San Antonio nº115, 28300 Aranjuez, Madrid
Phone: +34 620 118 060
Email: escayo@gmail.com
In compliance with the GDPR and the LOPD-GDD, all personal data collected via forms on this Website will be included in a file for the purpose of facilitating, expediting, and fulfilling the commitments established between the user and Alba Escayo, or to maintain the relationship established in those forms, or to respond to inquiries.
Unless the exception under Article 30.5 of the GDPR applies, a record of processing activities is maintained specifying, depending on its purposes, the processing activities carried out and the other conditions established by the GDPR.
The processing of user data is subject to the following principles under Article 5 of the GDPR and Articles 4 and following of the LOPD-GDD:
Lawfulness, fairness, and transparency: User consent is required with prior transparent information.
Purpose limitation: Data will be collected for specified, explicit, and legitimate purposes.
Data minimization: Only the strictly necessary data will be collected.
Accuracy: Data must be accurate and kept up to date.
Storage limitation: Data will only be kept as long as necessary.
Integrity and confidentiality: Data will be processed securely and confidentially.
Accountability: The Data Controller must ensure compliance with all these principles.
Only identifying data is collected. Special categories of data (Article 9 of the GDPR) are not processed.
The legal basis for processing personal data is consent. Alba Escayo commits to obtaining explicit and verifiable consent for one or more specific purposes.
The user may withdraw consent at any time, and doing so will not affect use of the Website.
Data is collected and managed for the purpose of:
Facilitating the relationship between the Website and the user
Managing inquiries or requests
Personalization and analytics
Marketing research to adapt the Website content and improve quality
Users will be informed of specific purposes at the time of data collection.
Data will be kept only for as long as necessary, specifically for a maximum of 18 months or until the user requests deletion. At the time of collection, users will be informed of the retention period or the criteria for determining it.
User data will not be shared with third parties. Users will be informed of any recipients at the time of collection.
Only individuals over 14 years of age may provide valid consent. In the case of minors under 14, consent from parents or guardians is required.
Alba Escayo commits to adopting appropriate security measures to prevent loss, alteration, or unauthorized access to personal data.
In the event of a data breach likely to result in high risk to individuals’ rights, the user will be notified without undue delay.
Data will be treated as confidential by the Data Controller and by any parties with authorized access.
Users have the following rights under the GDPR and LOPD-GDD:
Access: To know whether their personal data is being processed and to access it.
Rectification: To request correction of inaccurate or incomplete data.
Erasure: To request deletion when data is no longer necessary or consent is withdrawn.
Restriction: To limit data processing under certain circumstances.
Portability: To receive data in a structured format and transmit it to another controller.
Objection: To object to the processing of personal data.
Not to be subject to automated decision-making or profiling.
Users may exercise these rights by submitting a request to:
Postal address: San Antonio nº115, 28300 Aranjuez, Madrid
Email: escayo@gmail.com
The request should include:
Full name and ID (or legal representative)
Reason for request
Contact address
Date and signature
Supporting documentation
This Website may contain links to third-party websites. These sites are not operated by Alba Escayo and have their own privacy policies. Alba Escayo is not responsible for their data practices.
Users may file complaints with the data protection authority of their country. In Spain, this is the Spanish Data Protection Agency (https://www.aepd.es/).
By using this Website, the user accepts this Privacy Policy and consents to the processing of their personal data as described.
Alba Escayo reserves the right to modify this policy at any time due to legal, jurisprudential, or regulatory changes. Changes will not be explicitly notified. Users are encouraged to review this page regularly.
This Privacy Policy was last updated in accordance with Regulation (EU) 2016/679 and Organic Law 3/2018.
