Privacy Policy

Reading and accepting our privacy policy is required for you to use the services offered on the website www.andaraeliana.com. You will receive complete and transparent information about how your data is collected on this website, the purposes for which that information is used, the capture systems I use, and the tools I use to manage that information.

This website respects and safeguards the personal data of its users. As a user, you should know that your rights are guaranteed.

If you are under 14 years of age and have accessed this website without notifying your parents, you should not register as a user.

Please note that this Privacy Policy may change based on legislative or self-regulatory requirements, so users are advised to review it periodically. It will apply if users choose to fill out any of our contact forms where personal data is collected.

This website has been adapted to the requirements of Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), and Royal Decree 1720/2007, of December 21, known as the LOPD Implementing Regulation. It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons (GDPR), as well as with Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSICE or LSSI).

Responsible for the processing of your personal data

• • Identity of the Responsible Party: Eliana de los Angeles Andara Oropeza

• • NIF: 26294791H

• • Address: Calle Josep Melia 30, 4C, Palma, Spain.

• • Email: hola@andaraeliana.com

Principles applicable to your personal information

For the processing of the data we collect, we apply the following principles:

• • Principle of legality, loyalty, and transparency: We will always explain to you why we are collecting your data and your consent will be required for its processing.

• • Data minimization principle: We will only request the data strictly necessary for the purpose for which we require it.

• • Retention limitation principle: Data will be retained for no longer than necessary for the purposes of processing; in the case of subscriptions, we will periodically review our lists and delete those records that have been inactive for a significant period.

• • Principle of integrity and confidentiality: Your data will be processed in such a way as to ensure adequate security of your personal data and ensure confidentiality.

How do we obtain your data?

We can obtain your data from:

• • Service request form.

• • Contact form

• • Subscription form

What are your rights once you have provided your data?

You will have the right to:

• • Right of ACCESS to your personal data.

• • Right to request rectification of inaccurate data.

• • Right to request its DELETION when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

• • In certain circumstances, you may request that processing of your data be restricted, in which case we will only retain it for the exercise or defense of legal claims.

• • In certain circumstances and for reasons related to their particular situation, data subjects may exercise their right to OBJECT to the processing of their data. We will stop processing the data except for compelling legitimate reasons or to exercise or defend against potential legal claims.

• • In certain circumstances and for reasons related to your particular situation, you may request your right to data portability.

For what purpose will we process your personal data?

We will process your personal data collected through the Website for the following purposes:

• • In the event of contracting my services or products, in order to maintain the contractual relationship and the management, administration, information, provision, and improvement of the service.

• • Sending information requested through the contact form.

• • Sending newsletters and other commercial communications by email about the website and the business, digitalization, architecture, and other sectors.

• • Request participation in surveys that help improve the service provided.

There are other purposes for which we also process your personal data:

• • To support and improve the services offered by this website.

• • Other non-identifying data is also collected through some cookies that are downloaded to the user's computer when browsing this website, which we explain below.

• • To manage social media. The processing of data about followers of Eliana de los Angeles Andara Oropeza on social media will be governed by this section, as well as by the terms of use, privacy policies, and access regulations applicable to the social media platform in each case. We will process your data for the purposes of properly managing your presence on the social media platform, providing information about Eliana de los Angeles Andara Oropeza's activities, products, or services, and for any other purpose permitted by social media regulations. Under no circumstances will we use social media follower profiles to send individual advertising.

I do not sell, rent, or transfer personal data that could identify the user.

Remarketing

Through this feature, we can reach users who have previously visited our website in order to encourage them to return. Therefore, we collect data to make use of this feature.

The information we collect through this feature is collected through Facebook and LinkedIn cookies. You can learn more about the data these cookies collect in the Facebook and LinkedIn privacy policies.

If you would like to prevent this information from being collected, you can opt out of Google's use of cookies through Google's Ad Settings.

This type of service allows you to interact with social networks or other external platforms directly from the pages of this website. The interactions and information obtained through this website will always be subject to the user's privacy settings on each social network. If a service that allows interaction with social networks is installed, it is possible that, even if users do not use the service, it may collect web traffic data relating to the pages on which it is installed.

Legitimation

Your data is processed based on the following legal bases:

• • The request for information and/or the contracting of the services of Eliana de los Angeles Andara Oropeza

• • Free, specific, informed, and unequivocal consent, as we inform you by making this privacy policy available to you. After reading it, if you agree, you can accept it by making a statement or taking a clear affirmative action, such as checking a box provided for this purpose.

If you do not provide your information, or if you provide it incorrectly or incompletely, I will not be able to process your request, making it impossible to provide you with the requested information or complete the contracting of services.

Data category

The categories of data we process are:

• • Identification data: name, email.

• • Your company information: name, number of partners, team, location.

• • Other data related to the operation of your company.

No categories of specially protected data are processed.

Recipients

We have some external tools that will have access to your data:

Active Campaign: Used for email marketing and customer management. This service is provided by ActiveCampaign, LLC, whose office is located in Chicago, USA. They have signed the Privacy Shield, which can be verified at this link: https://www.privacyshield.gov/participant?id=a2zt0000000GnH6AAK&&tatus=Active. You can view more information about the privacy policy here: https://www.activecampaign.com/privacy-policy/

Asana: Online task management service provided by Asana, Inc. Located in the United States, it has subscribed to the EU-US Privacy Shield, which can be consulted at https://www.privacyshield.gov/participant?id=a2zt0000000TNLRAA4&&ontact=true. Its privacy policy can be consulted at https://asana.com/es/terms#gdpr 

Calendly: A tool used to schedule meetings. The company is located in the United States and can be contacted at support@calendly.com. Its privacy policy can be found at https://calendly.com/pages/privacy. 

Canva: A tool used for creating and editing multimedia content. Canva can be found at https://about.canva.com/privacy-policy/. Canva has a legal representative in Europe to process data protection requests.

Dropbox: Used for cloud hosting of documents related to the products or services offered on the website. Service provided by Dropbox, Inc., located in California, United States. It has a security agreement called Privacy Shield, which can be consulted at https://www.privacyshield.gov/participant?id=a2zt0000000GnCLAA0&&tatus=Active. For more information about its privacy policy, you can visit https://www.dropbox.com/privacy. 

Facebook: A tool used as a social network and for the purpose of connecting with users, clients, buyers, and participants. The service is provided by Facebook Ireland Ltd.; its servers are located in the United States and subscribe to the Privacy Shield security protocol, which can be verified at https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&&tatus=Active. Its privacy policy can be consulted at https://www.facebook.com/business/gdpr. This tool also manages advertising that may be carried out on WhatsApp and/or Instagram. 

Google: Tool used for email management and cloud storage, task management, and statistical analysis of website visits. This service is operated by Google LLC, located in Mountain View, California, United States of America. It subscribes to the EU-US Privacy Shield, which can be consulted at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&&tatus=Active. For more information about its privacy policy, please visit: https://policies.google.com/privacy 

LastPass: Password management tool, operated by LogMeIn, Inc., is located in the United States and adheres to the Privacy Shield protocol, which can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000013fAAA&&tatus=Active. For more information about your privacy, visit this link: https://www.logmeininc.com/es/legal/privacy-shield

Loom: A tool used for screen video recording. This service is operated by Opentest, Inc., located in the United States of America. It is a subscriber to the EU-US Privacy Shield, which can be consulted at https://www.privacyshield.gov/participant?id=a2zt00000008VjcAAE&status=Active. For more information about its privacy policy, please visit: https://www.useloom.com/privacy-policy 

PayPal (Europe) S.à rl et Cie, SCA: Company used to manage debit and credit card payments on the website. Located in Luxembourg. For more information, please visit https://www.paypal.com/es/webapps/mpp/ua/privacy-full?locale.x=es_ES 

Skype: A tool used for video conferencing. This service is operated by Microsoft Corporation, located in the United States of America. It subscribes to the EU-US Privacy Shield, which can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK&status=Active. For more information about its privacy policy, please visit: https://privacy.microsoft.com/es-mx/privacystatement 

Slack: Messaging tool developed by Slack Technologies, Inc. Located in the United States, they subscribe to the Privacy Shield, which can be verified at https://www.privacyshield.gov/participant?id=a2zt0000000GnMBAA0&status=Active. To learn more about their privacy policy, you can visit this link: https://slack.com/intl/es-la/gdpr 

Stripe Inc.: Used to manage debit and credit card payments on the website. This company, located in the United States, has a security agreement called Privacy Shield, in compliance with the requirements of the European Data Protection Committee, which can be consulted here https://www.privacyshield.gov/participant?id=a2zt0000000TQOUAA4&status=Active. For more information, visit https://stripe.com/us/privacy. 

Thrive Cart: A payment management tool operated by WebActix Ltd, a New Zealand-based company. To learn more about its privacy policy, please visit https://legal.thrivecart.com/platform/gdpr/. 

Vimeo: A platform created for sharing videos. This service is operated by Vimeo, Inc., located in the United States. Vimeo subscribes to the Privacy Shield, which can be verified at this link: https://www.privacyshield.gov/participant?id=a2zt00000008V77AAE&status=Active. For more information about its privacy policy, please visit https://vimeo.com/privacy.  

Wetransfer: Tool used for sending digital files, the service is provided by the company WeTransfer BV, which can be contacted via email at legal@wetransfer.com and its privacy policy can be viewed at https://wetransfer.com/legal/privacy 

WhatsApp: Tool used for communication with users, buyers, clients and participants through the company WhatsApp Ireland Limited (for those located in Europe), can be contacted through the link https://www.whatsapp.com/contact/?subject=messenger and its privacy policy can be seen at https://www.whatsapp.com/legal?eea=1#privacy-policy 

Zapier: This is a tool used to automate tasks. Zapier Inc. is located in the United States and subscribes to the Privacy Shield Framework (https://www.privacyshield.gov/participant?id=a2zt0000000TNk2AAG&s).

In specific cases, GDB may use applications or tools not included or mentioned in this list, as they may be a better option to assist in the completion of a specific task. If this occurs, GDB will notify its users, clients, or participants, as appropriate.

Data secrecy and security

When using the data included in our file, Eliana de los Angeles Andara Oropeza undertakes to respect confidentiality and use them in accordance with the defined purposes, as well as to comply with its obligation to store them and adapt all measures to prevent alteration, loss, treatment or unauthorized access in accordance with the provisions of Royal Decree 1720/2007, of December 21, which approves the Regulations for the development of the LOPD (hereinafter "ROPD").

This website includes an SSL certificate. This is a security protocol that ensures your data travels securely and in full. Data is transmitted between a server and a web user, and in return, is fully encrypted.

We cannot guarantee the absolute invulnerability of the Internet and therefore the possibility of data breaches through fraudulent access by third parties.

User Responsibility

You are solely responsible for the information you provide, both during your registration and through your participation in the website or your request for information. Therefore, you guarantee that the Personal Information you provide to Eliana de los Angeles Andara Oropeza is accurate, and you are responsible for informing us of any changes to it.

Acceptance and consent

The user declares that he or she has been informed of the conditions regarding the protection of personal data, and that he or she accepts and consents to the processing of such data by Eliana de los Angeles Andara Oropeza in the manner and for the purposes indicated in this privacy policy.

Modifications

Eliana de los Angeles Andara Oropeza reserves the right to modify its Data Protection Policy in accordance with applicable law at any time. Any modification to this Data Protection Policy will be published on the Website. We recommend that you visit this Privacy Policy regularly to stay up-to-date with any changes.

The privacy policy was last updated on 05/03/2023.