Privacy Policies

In compliance with the provisions of the General Data Protection Regulation 2016/679 (GDPR) and Organic Law 3/2018 on Data Protection and the Guarantee of Digital Rights (LOPDGDD) of December 5, 2018, we hereby inform you:

1. DATA CONTROLLER

Identity of the data controller: Saneta Sofía Galasova, ID No.: 50775722W, hereinafter “the Data Controller.”

Adress: Calle Manuel de Falla, 32, P02 4, Alcobendas, 28100 Madrid, Spain.

Contact Email: saneta@galasova.art

2. PURPOSE OF DATA PROCESSING

Please be advised that the data you provide will be processed for the following purpose:

To manage and maintain the operation of the website, including the creation, development, and dissemination of our own informational and promotional content, which may be published on various digital platforms and channels, both internal and external to the website.

Manage the receipt of donations made through various channels, as well as comply with the legal, accounting, and tax obligations arising from such contributions.

To offer users the ability to post ads on the website’s bulletin board in order to promote their own products, services, or businesses, and to manage the data associated with this activity (such as contact information, service descriptions, etc.).

To communicate relevant information about new initiatives, campaigns, or project updates, only when the user has given consent to receive such communications.

To comply with applicable legal obligations regarding data protection, taxation, fraud prevention, and other applicable regulations.

Furthermore, in accordance with the provisions of the GDPR, a record of processing activities is maintained that specifies, according to their purposes, the processing activities carried out and the other circumstances established in the GDPR.

Personal information may not be used for purposes other than those related to the contracted services or purchased products. No automated decisions will be made based on this profile.

3. LEGAL BASIS FOR DATA PROCESSING

The legal basis for the processing of your data is as follows:

The consent provided by the User by accepting this Policy and checking the corresponding box.
The User has provided their personal data within the framework of a contractual or precontractual relationship to address their request and/or inquiry; therefore, the processing of such data is necessary for the maintenance of that relationship.
The legal obligations applicable to the Data Controller that require the processing of personal data in accordance with the services provided or those related to tax matters.

The User may, at any time, revoke their consent to the processing of their personal data. Under no circumstances does the withdrawal of such consent affect the provision of the service and/or the performance of contracts with the Data Controller.

4. PERSONAL DATA PROCESSED AND ITS SOURCE

The personal data we process is of an identifying nature and has been provided by the User by filling out the contact form, sending emails, or using the features offered on the website.

The use of the contact sections, form submission, and/or features offered on the Portal is voluntary. However, filling out certain fields on the form or providing information through the use of other features is necessary to properly address and process your request; therefore, the User’s refusal to provide the required information will prevent the Owner from properly addressing and processing it.

The User warrants that the information provided to us is true, accurate, and complete. Information will be canceled, deleted, or blocked when it is inaccurate, incomplete, or no longer necessary or relevant for its intended purpose, in accordance with applicable law. If the personal data provided pertains to a third party, the User warrants that they have informed that third party of the Privacy Policy and have obtained their authorization to provide their data for the purposes indicated above. The User also warrants that the data provided is accurate and up-to-date, and is liable for any direct or indirect damage or harm that may result from a breach of this obligation. The User agrees to ensure the accuracy and correctness of the data provided to us and undertakes to keep it duly updated.

5. DATA PROTECTION FOR MINORS

In accordance with the GDPR and the LOPDGDD, only individuals 14 years of age or older may lawfully give their consent to the processing of their personal data. Only individuals 14 years of age or older may provide personal data on this website. For individuals under 14 years of age, the consent of their parents or guardians is required in order to process their personal data.

6. RETENTION PERIODS FOR PERSONAL DATA

The personal data provided by the User will be retained for as long as the User remains registered with the service, for as long as the business relationship continues, for as long as the User does not request its deletion, or for the duration of the legally established period. Likewise, such data may be retained when necessary to comply with a legal obligation or to establish, exercise, or defend legal claims.

If the User withdraws their consent or exercises their right to object or to have their data erased, their data will be retained in a blocked format and made available to the judicial authorities for the periods established by law to address any potential liabilities arising from the processing of personal data. Under no circumstances will this affect the provision of the service and/or the performance of contracts with the Data Controller.

7. CONFIDENTIALITY AND SECURITY OF PERSONAL DATA

The Data Controller undertakes to adopt the necessary technical and organizational measures, in accordance with the level of security appropriate to the risk posed by the collected data, so as to ensure the security of personal data and prevent the accidental or unlawful destruction, loss, or alteration of personal data transmitted, stored, or otherwise processed, or the unauthorized disclosure of or access to such data.

Personal data will be treated as confidential by the Data Controller, who undertakes to inform and ensure, through a legal or contractual obligation, that such confidentiality is respected by its employees, associates, and any person to whom the information is made available.

8. DISCLOSURE OF PERSONAL DATA AND RECIPIENTS

Your personal data will be disclosed in the cases provided for by law, for example, to public authorities to comply with obligations directly enforceable against the Data Subject, or when necessary to fulfill the purposes of processing indicated above, or to provide services strictly necessary for the conduct of the business.

9. USER RIGHTS

What are your rights when you provide us with your data?

You have the right to obtain confirmation as to whether or not we are processing personal data concerning you. You have the right to access your personal data, as well as to request the correction of inaccurate data or, where applicable, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. Under certain circumstances, you may request the restriction of the processing of your data, in which case we will retain it solely for the purpose of exercising or defending legal claims. Under certain circumstances and for reasons related to your particular situation, you may object to the processing of your data, in which case the data controller will cease processing the data, except for compelling legitimate grounds or the exercise or defense of potential legal claims. In cases where legally applicable, you have the right to data portability, which means you have the right to receive the personal data we are processing about you and to store it on your own device.

You may exercise the following rights with the Data Controller, where applicable: the right of access, rectification, objection, erasure, restriction of processing, data portability, and the right to object to being subject to automated individual decision-making, by submitting a written request accompanied by a photocopy of your national ID card to verify your identity, with the subject line “GDPR Rights,” addressed to Calle Manuel de Falla, 32, P02 4, Alcobendas, 28100 Madrid, Spain, or to the email address: saneta@galasova.art

Likewise, we inform you that you may submit any complaint regarding personal data protection to the Spanish Data Protection Agency (www.agpd.es), Spain’s supervisory authority.