PRIVACY POLICY

DATA CONTROLLER

Adriana Mesa Blas, who holds Tax Identification No. 09035375-D and whose address for this purpose is Avda. Lope de Figueroa n.º 18, 2.º G, 28804, Alcalá de Henares, Spain, is the owner of the website www.iberianwords.com (the “website”) and complies with the guidelines of the law in force in relation to data protection, Regulation (EU) 2016/679 of 27 April 2016 (GDPR), together with Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD).

PROCESSING PRINCIPLES

The following principles will apply to the processing of personal data, which are tailored to the requirements of the data protection law in force:

  • Principle of lawfulness, fairness and transparency: I will seek users’ consent to process their personal data for one or more specific purposes, of which I will inform them in advance in a fully transparent way.
  • Principle of data minimisation: I will only ask users for data that is strictly necessary for the relevant purposes.
  • Principle of storage limitation: I will retain users’ data for the time necessary for the purposes of the processing, depending on the purpose, and I will inform users of the corresponding retention period.
  • Principle of integrity and confidentiality: I will process users’ data in a way that ensures that personal data remains secure and confidential.

DATA REQUESTED AND PURPOSE OF PROCESSING

Users are solely liable for the accuracy and correction of the data they supply, whether directly or via the website, to Adriana Mesa Blas, who they exempt from any liability in this respect.

In this regard, Adriana Mesa Blas informs users that data provided voluntarily will be compiled and processed for the following purposes:

  • Web visitors
    • Users can visit the website without providing personal data. However, when accepting cookies or similar technologies, the browser will send information that is automatically collected on the servers of www.iberianwords.com or those of third parties.
    • Please see the Cookie Policy to clearly understand the specific cookies used by the www.iberianwords.com website, their purpose and how to configure or disable them.

Lawful basis: the data subject’s consent.

  • Contact
    • Responding to user enquiries, requests or queries.
    • Managing the service requested by the user, responding to their request or processing their claim.
    • Sending information electronically about the user’s request.

Lawful basis: the data subject’s consent.

  • Subscription form
    • Sending event or commercial information electronically.
    • Performing analysis and improvements to mailing campaigns to improve Adriana Mesa Blas’s commercial strategy.

Lawful basis: the data subject’s consent.

  • Buying products or services (Clients)
    • Managing and administering the products or services purchased.
    • Establishing and monitoring budgets through communication between both parties.
    • Sending information electronically about the user’s request.
    • Sending information electronically about commercial information or events as long as there is express authorisation to do so.
    • Invoicing, and declaring the appropriate taxes.
    • Performing the corresponding transactions.
    • Management and fee recovery.

Lawful basis: the contractual relationship between the parties.

  • Buying products or services (Suppliers)
    • Invoicing and declaring the appropriate taxes.
    • Performing the corresponding transactions.
    • Managing invoicing.

Lawful basis: the contractual relationship between the parties.

  • Social media
    • Responding to user enquiries, requests or queries.
    • Managing the service requested.
    • Liaising with the user and building a community.

Lawful basis: that afforded to the social network in question. It will be subject to the terms of
use, privacy policies and access rules belonging to the relevant social network, which the user
will have accepted in advance.

  • Event registration, webinars or free courses
    • Providing passwords to access the corresponding course, webinar or event.
    • Managing the creation of a user account, if applicable.

Lawful basis: the data subject’s consent.

CONSENT

When users input their data, they provide their express and unequivocal consent. In addition, they confirm that they have been informed of the personal data protection terms and accept and agree to the automated processing of this data so that Adriana Mesa Blas can process the data provided by the user for the above purposes. The user also gives their consent to the international transfer of data, solely where any of the suppliers or third parties providing the necessary services for the proper functioning of this website are located abroad.

If the user decides not to provide the personal data requested or to reject this Privacy Policy, it will be impossible to manage the services (purposes) described above.

DATA COLLECTION

Adriana Mesa Blas collects the user’s personal data using various methods. At the time of collection, the user will be informed, through informative statements, of the controller, the purpose and the legal basis of the processing, the recipients of the data and the retention period of the information, together with details of how they can exercise their data protection rights.

Adriana Mesa Blas uses social media as another way to reach users. The information collected from messages and communications published may contain personal information available online and accessible to the public. These social networks have their own privacy policies which explain how to use and share users’ information. Adriana Mesa Blas therefore advises users to consult them before using the social networks to confirm that they agree to how their information will be collected, processed and shared.

MINORS

Express reference is made to minors under 14 years of age in relation to the processing of their personal data. Minors may not access this website without the consent of their parents or guardians. In this sense, Adriana Mesa Blas is not liable for any breach of this provision.

THIRD-PARTY PERSONAL DATA

Adriana Mesa Blas only processes the data provided by the data subjects. If the user provides third-party data, the user must inform them and request their consent in advance. To the contrary, Adriana Mesa Blas is exonerated from any liability as a result of a breach of this requirement.

DATA PROCESSORS

Adriana Mesa Blas confirms that she will not transfer personal data to third parties unless she is legally required to do so. However, in the case of transfers to third parties, users will be informed in advance and their express consent to such transfers will be requested.

Although this does not constitute a data transfer, to provide the user with the service requested, third-party companies that are suppliers to Adriana Mesa Blas (for example, hosting services, site maintenance and security, invoicing etc.) access users’ data to provide the contracted service. These processors shall access the user’s data according to Adriana Mesa Blas’s instructions, may not use such data for any other purpose and shall maintain the strictest confidentiality. Some of the above parties have their servers abroad. Through this Privacy Policy, Adriana Mesa Blas wishes to clarify that, in the above circumstances, she will make the relevant international transfers to enable her to provide the service or functionality that the user has requested, at all times safeguarding the security of their data and ensuring that the data protection requirements contained in the GDPR are met, and putting in place the necessary confidentiality and other necessary technical and organisational measures. Such guarantees and safeguards consist of European Commission adequacy decisions, standard contractual clauses approved by the European Commission and other legal mechanisms permitted by the GDPR.

RIGHTS OF DATA SUBJECTS

In any event, Adriana Mesa Blas guarantees users’ rights to access, rectification, erasure, information, objection, restriction and portability on the terms set out in the legislation in force. Users may exercise these rights by sending an express request to the postal address specified in the section entitled “DATA CONTROLLER” or by sending an email to adriana@iberianwords.com, stating “GDPR rights” in the subject line and providing a photocopy or scanned copy of their identity card. If the user so requires, Adriana Mesa Blas will make the corresponding forms available for the proper exercise of their rights. Each of these rights is explained in more detail below:

  • Right of access: it enables information on the user’s personal data being processed to be obtained and understood.
    Right of rectification: it enables the correction of errors, the amendment of data that turns out to be inaccurate or incomplete and guarantees the accuracy of the information being processed.
    Right of erasure: it enables requests to be made to remove the data processed when it is no longer necessary to perform or provide the service.
    Right to object: it enables the processing of the user’s personal data to be prevented, other than on legitimate grounds or to make or defend potential claims. In such cases, the data will be blocked for the corresponding period for as long as the legal obligations remain.
    Restriction of processing: it enables the restriction of processing of the user’s data, in which case it will only be retained to make or defend claims.
    Data portability: it enables the user’s data to be requested and sent to other specified controllers (as long as this is technically possible).
    The right not to be subject to individual automatised decision-making (including profile creation): the right not to be subject to a decision based on automated processing which produces effects or significantly affects the data subject.

Where users are acting as representatives of the data subjects, it will be necessary for them to prove this by supplying their national identity card or electronic signature.

In turn, users have the right to withdraw their consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. For further information, visit the following link: https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/

Users are also entitled to complain to the Spanish Data Protection Authority (AEPD) if they consider that their data protection rights have been infringed. They can contact the AEPD at its address: calle Jorge Juan, 6, 28001, Madrid or through its homepage: https://sedeagpd.gob.es/sede-electronica-web/ (in Spanish).

LENGTH OF THE PROCESSING

Any data that users have provided to Adriana Mesa Blas will be retained for as long as there is a mutual interest in continuing the purposes of the processing or for the period during which legal liability may be incurred in relation to the services provided. Where it is no longer necessary for this purpose, the data will be erased, taking suitable security measures to ensure that it is entirely pseudonymised or destroyed. If required, Adriana Mesa Blas can provide users with a table showing exactly how long each type of processing will last.

ADDITIONAL NOTES

Adriana Mesa Blas reserves the right to amend this Privacy Policy to adapt it to potential changes to legislation or case law. The data subjects will be informed of any substantial change to the Privacy Policy that may affect the data processing.

Users can contact Adriana Mesa Blas at the email address specified in the “DATA CONTROLLER” section if they have any questions about this Privacy Policy.

Would you like to work together?