1. Data controller
- Identity: Esterivet Control SLP
- Tax ID: B56350721
- Address: C/. Botánico Cavanilles 46 bajo, 12006 Castellón de la Plana (Castellón)
- Email: cvmariasegura@gmail.com
- Data Protection Officer: Not appointed
2. Data we collect and purposes
We collect personal data that users voluntarily provide through website forms or other means of contact, as well as data generated automatically during browsing. The purposes are as follows:
- Managing enquiries and communications: responding to requests sent by email or contact form.
- Service provision: managing contracts, orders or user registrations where applicable.
- Sending commercial communications: only if the user has given their express consent.
- Website improvement: anonymous statistical analysis of browsing behaviour.
3. Legal basis for processing
The processing of data is based on: (a) the user's explicit consent, (b) the execution of a contract to which the user is a party, (c) compliance with legal obligations, or (d) the legitimate interest of the controller, as applicable to each specific purpose.
4. Retention period
Data will be retained for the time necessary to fulfil the purpose for which it was collected and, in any case, for the legally established periods. Once the purpose has been fulfilled, data will be deleted or anonymised.
5. Recipients and data sharing
Personal data will not be shared with third parties except where required by law or where necessary for the provision of the service. In such cases, the receiving third parties will act as data processors under the corresponding data processing agreement.
Providers that may access data: Vercel Inc. (web hosting) and Resend Inc. (contact form email delivery).
6. International transfers
Where any provider is located outside the European Economic Area, we ensure that appropriate safeguards exist in accordance with Article 46 of the GDPR, such as Standard Contractual Clauses or adherence to privacy frameworks recognised by the European Commission.
7. User rights
Users may exercise at any time the following rights recognised by the GDPR, by writing to cvmariasegura@gmail.com with a copy of their identity document:
Access · Rectification · Erasure (right to be forgotten) · Objection · Restriction of processing · Portability · Withdrawal of consent at any time, without retroactive effect.
Users also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if they consider that the processing of their data does not comply with the GDPR.
8. Security
We apply appropriate technical and organisational measures to protect personal data against loss, destruction, unauthorised access or accidental disclosure, in accordance with Article 32 of the GDPR.
9. Minors
This website is not intended for children under the age of 14. We do not knowingly collect data from minors. If we detect that data has been provided by a minor without verifiable consent from their legal guardians, we will proceed to delete it immediately.