Data Controller: Andrea Martínez López with DNI 47999368R, residing at Calle Montjuic, 17, 08757, Corbera de Llobregat (Barcelona, Spain), hereinafter referred to as De Corteza Flexible, and whose contact email is hola@decortezaflexible.com

Data Requested on the Website and Purpose of Processing:

Name, surname, and email address in contact forms:

To enable any direct contact with De Corteza Flexible, whether to ask questions, make comments, provide suggestions, request a service or product, or for any other information. Failing to provide the minimum necessary personal data will prevent De Corteza Flexible from responding to the request.

Name and email address: To allow comments on the blog of the website.

Name, surname, address, phone number, email address, DNI: This information will be requested at the time of payment for the service, for processing all matters related to the client.

Name, phone number, and email address for the newsletter: With the explicit and voluntary consent of the data subject, the website will request the minimum necessary information to send an automated commercial newsletter, which will inform about advertising, promotions, and other information related to the services and/or products offered by De Corteza Flexible.

If the user is under 16 years old, they must have authorization from their parents or legal guardians to provide their personal data. De Corteza Flexible cannot effectively verify the age of users and is therefore exempt from any responsibility if the user does not comply with this requirement.

De Corteza Flexible will ensure that the use of the website, its content, and the processing of personal data of the user are carried out in the most correct manner. To this end, the user can always exercise their rights of access, rectification, cancellation, portability, erasure, or objection, in full compliance with the applicable laws, by writing to hola@decortezaflexible.com

At no time will De Corteza Flexible share the data it holds with third parties. In the event of doing so to fulfill services contracted by a participant, send the newsletter, comply with legal requirements, or for website administration, appropriate confidentiality agreements will be provided between the parties.

Links to third parties on the website have privacy policies that are not related to De Corteza Flexible. Access to these sites will be the user’s responsibility, and it is their responsibility to review and accept or reject these policies.

FORMS:

The website has 4 types of forms:

Contact Form: Users, clients, or participants may find forms that facilitate communication with De Corteza Flexible, to ask questions, make comments, request a quote, book one of the services offered on the website, or exercise any rights they have. Failure to provide the minimum necessary personal data will prevent De Corteza Flexible from responding to the request. This processing is considered legitimate as part of pre-contractual diligence. The website and email server of De Corteza Flexible will be responsible for processing.

Advertising Form: Users, buyers, or participants will be asked for their explicit and voluntary consent to provide De Corteza Flexible with the minimum necessary data to send advertising and commercial information related to the services and/or products offered by De Corteza Flexible, to be added to an automated email marketing file managed by the processor indicated below. The processing of personal data in this section has been done with the consent of the data subject.

Comment Form for the Blog: To prevent inappropriate messages and ensure proper monitoring, users will be asked for their name, email, and website to identify them in the comments they wish to make on blog posts. This data will be visible to other users of the website. If you do not wish the data to be visible to others, you must contact De Corteza Flexible via email. The website server will be responsible for processing with the consent of the data subject.

Form to Process Service Requests: Users, clients, or participants will be asked for their data so that De Corteza Flexible can process the requested services. Legitimate processing of personal data due to the contractual relationship with the client or participant. The data will be stored on the website server.

DATA PROCESSORS:

De Corteza Flexible requires the support of third parties to adequately offer its services and products, with whom it enters into confidentiality agreements and verifies compliance with personal data protection regulations. The data provided to these third parties may not be used for purposes not authorized by the data subject. In compliance with the principles of information and transparency, the following third parties are known:

Mailerlite: Used to automate the sending of commercial information and send advertisements about the products and/or services offered on the website to the data subject’s email. This service is provided by UAB “MailerLite”, Mindaugo str. 1A-57, LT-03108 Vilnius, Lithuania. You can consult their privacy policy here: https://www.mailerlite.com/legal/privacy-policy

Zapier: A tool used to automate tasks. The company, Zapier Inc., is located at Zapier, Inc., 548 Market St. # 62411, San Francisco, CA 94104 – 5401 and can be contacted via email at contact@zapier.com. Their privacy policy can be seen at https://zapier.com/privacy/

Facebook Pixel: An analytical tool for advertising, used to understand the actions of data subjects on this website. This service is provided by Facebook, Inc., located at 1601 Willow Road Menlo Park, CA 94025, United States. If located outside the United States or Canada, the data control entity responsible is Facebook Ireland Ltd., located at 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland. It is certified under the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework, as evidenced at https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC

For more information about their privacy policy, visit https://www.facebook.com/privacy/explanation

Google Analytics: Web analytics service to view website usage statistics. This service is provided by Google LLC, located in Mountain View, California, United States, and is subscribed to the EU-U.S. Privacy Shield Framework, which can be reviewed at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI

For more information about their privacy policy, visit https://policies.google.com/privacy

Zoom: A tool used for video conferences. This service is provided by Zoom Video Communications, Inc., located in San Jose, California, United States, and is subscribed to the EU-U.S. Privacy Shield Framework, which can be reviewed at https://www.privacyshield.gov/participant?id=a2zt0000000TNkCAAW

For more information about their privacy policy, visit https://zoom.us/privacy

Stripe Inc: Used to manage payments via debit and credit cards on the website. This company is located in the United States and has a Privacy Shield agreement in accordance with the European Data Protection Committee’s requirements, which can be reviewed here: https://www.privacyshield.gov/participant?id=a2zt0000000TQOUAA4

For more information, visit https://stripe.com/us/privacy

Google Drive: Used for the virtual storage of documents related to the products or services offered on the website. Located in Mountain View, California, United States. It has a Privacy Shield agreement in accordance with the European Data Protection Committee’s requirements. For more information about their privacy policy, visit https://policies.google.com/privacy

WhatsApp: A tool used for communication with users, buyers, clients, and participants through WhatsApp Ireland Limited (for those located in Europe). Their privacy policy can be seen at https://www.whatsapp.com/legal?eea=1#privacy-policy

Gmail: An email service. This service is provided by Google LLC, located in Mountain View, California, United States. They have adopted data processing clauses approved by the European Commission which can be reviewed at: https://cloud.google.com/security/gdpr/resource-center. For more information about their privacy policy, visit https://policies.google.com/privacy

Instagram: A social network and app for posting photos and videos owned by Facebook Inc. It can be contacted at https://help.instagram.com/ and their privacy policy can be seen at https://help.instagram.com/155833707900388

In specific cases, De Corteza Flexible may use applications or tools not included or mentioned in this list if it provides a better option for completing a particular task; if this occurs, De Corteza Flexible will notify its users, clients, or participants as applicable.

NEWSLETTER POLICIES:

These policies will always be understood as complementary to the terms and conditions outlined on the website, both of which apply equally in the event of a dispute. The privacy and intellectual property policies applied will be the same as those stated in the website’s terms and conditions. The term “newsletter” refers to the digital bulletin that De Corteza Flexible periodically produces and sends to its subscribers through an external email service provider, to which the user has voluntarily subscribed. De Corteza Flexible is not obligated to send the newsletter at defined time intervals and is free to do so as it sees fit. The user may exercise their rights of access, rectification, cancellation, or objection at any time by following the instructions found in the newsletter’s footer. The user must not share its content with third parties, as this would violate De Corteza Flexible’s copyright. The only possible distribution channel is that managed and/or authorized by De Corteza Flexible. De Corteza Flexible will not be responsible for third-party content featured in the newsletter; any disputes arising should be addressed directly with the person or company mentioned. All material presented in the newsletter is protected by copyright in favor of De Corteza Flexible, and if it belongs to third parties, it is understood that De Corteza Flexible has the necessary authorization to use it as agreed with the author.