INFORMATION ON THE PROCESSING OF PERSONAL DATA

Pursuant to Art. 13 of Regulation (EU) 2016/679 (GDPR)

1. Data Controller

The Data Controller for the personal data collected through this website (www.pauleansoleagaabascal.com) is:

• Data Controller: Paule Ansoleaga Abascal
• Website: pauleansoleagaabascal.com
• Privacy Contact Email: pauleansoleagaabascal@gmail.com

2. Types of Data Collected

Among the types of Personal Data that this website collects, by itself or through third parties, there are:

• Browsing Data: IP addresses, domain names of the computers used by users, time of requests, the method used to submit the request to the server, and other parameters regarding the user’s operating system and IT environment.
• Data Provided Voluntarily by the User: First name, last name, email address, and any other data voluntarily entered in contact forms or during user registration/login procedures on the site.

3. Purposes and Legal Basis of Processing

User data is collected for the following purposes:

• Responding to Inquiries: Responding to requests submitted via email or contact forms (Legal Basis: performance of a contract or pre-contractual measures – Art. 6.1.b GDPR).
• User Account Management: Managing registration, access, and security of the restricted account area (Legal Basis: performance of a contract – Art. 6.1.b GDPR).
• Website Security and Maintenance: Preventing fraud, malicious activities, or cyberattacks (Legal Basis: legitimate interest of the Controller – Art. 6.1.f GDPR).

4. Processing Methods and Data Retention

Processing is carried out using computers and/or IT-enabled tools, following organizational procedures and modes strictly related to the purposes indicated, with security measures in place to prevent unauthorized access, disclosure, or modification of data.

Personal Data is retained for as long as required to fulfill the user’s request or as required by applicable laws.

5. Disclosure and Transfer of Data

Collected data will never be sold or publicly disclosed for commercial purposes. Data may be accessible to third-party technical service providers (such as web hosting providers or security services) appointed, if necessary, as Data Processors.

6. Rights of the Data Subject

Users may exercise their rights under Articles 15-22 of the GDPR at any time, including:

• Obtaining confirmation as to whether or not personal data concerning them exists.
• Requesting access, rectification, or erasure (right to be forgotten) of their personal data.
• Requesting the restriction of processing or objecting to it.
• Requesting data portability.
• Lodging a complaint with a competent Data Protection Authority.

To exercise these rights, users can send a written request to the Data Controller’s contact email listed above.