Lola Castellanos (the "Data Controller" or “Controller”) treats data protection as part of her professional culture. Please note that browsing the different pages of our website may require the processing of personal data; for this reason, we provide Users (the "User" or "Users") with the following legal information.

The processing of personal data is based on the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (the "GDPR"), and on the other legislation implementing it.

The products and services offered by the Controller are intended for Users over 18 years of age. In the exceptional event that a service is offered specifically for minors under that age, the Controller will request the consent of their parents or guardians for the processing of their personal data.

​

Collection of personal data

The website of Lola Castellanos collects a series of general data and information when a data subject or an automated system accesses the Website. This general data and information is stored in the server log files. The following may be collected: the browser types and versions used, the operating system used by the accessing system, the website from which an accessing system reaches our Website (so-called referrers), sub-websites, the date and time of access to the website, an Internet Protocol address (IP address), the Internet service provider of the accessing system, and any other similar data and information that may be used in the event of attacks on our information technology systems. All this information is available to you at the foot of every page of the Website or at the following link: Cookies.

This information is needed to: deliver the content of our Website correctly, optimise the content of our Website and its advertising, ensure the long-term viability of our information technology systems and website technology, or provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber-attack.

The User is responsible for the truthfulness and accuracy of the data provided.

​

Registration on our Website

Users may register on our Website, for which they will be asked to provide personal data. This data is collected and stored exclusively for the Controller's internal use and for its legitimate purposes. The Controller may request its transfer to one or more Processors (for example, courier services) that also use personal data for a legitimate purpose attributable to the Processor.

The data collected is not passed on to third parties unless there is a legal obligation to do so or the transfer serves the purpose of criminal proceedings.

User registration allows the Controller to offer content or services that can only be offered to registered Users. Users may change their personal data at any time or exercise their legally recognised rights before the Controller.

 

Processing principles

​

Data Controller: Lola Castellanos (Legal Notice)

​

Legal basis: GDPR: Art. 6.1(a) the User has given consent to the processing of their personal data for one or more specific purposes; Art. 6.1(b) processing is necessary for the performance of a contract to which the User is party or in order to take steps at the User's request prior to entering into a contract.

​

Purpose of processing: administrative management of requests made through the website, and the follow-up and sending to Users or potential Users of activities, news, courses, programmes or any of the services and products offered in connection with the Controller's activity.

​

Data subjects: Natural persons, including representatives of legal entities.

Categories of data: Identification, transaction and banking data.

​

Categories of recipients: No data disclosures are planned.

​

International transfers: No international data transfers are planned.

Retention period: The Controller will keep the User's personal data only for as long as necessary to achieve the purpose of the processing, or as permitted by the European legislator or other legislators in the laws or regulations to which the Controller is subject. If the purpose of the processing no longer applies, or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data will be routinely blocked or erased in accordance with the legal requirements.

​

Exercise of rights: As set out in this Privacy Policy

 

Subscription to commercial or advertising newsletters

On this Website, Users have the opportunity to subscribe to the Controller's newsletter.

This subscription allows the Controller to send periodic communications about news, offers, promotions or other information that may be of interest to the User. The newsletter can only be received by the User if the User has a valid email address and voluntarily registers to receive it.

​

For legal reasons, a confirmation email will be sent, under the double opt-in procedure, to the email address registered by a User for the first time to receive the newsletter. This confirmation email is used to verify whether the owner of the email address, as the data subject, is authorised to receive the newsletter.

The personal data collected as part of a newsletter registration will only be used to send our newsletter. In addition, Users may be informed by email, whenever necessary, of changes to the newsletter for technical or legal reasons. The personal data collected for the newsletter will not be transferred to third parties.

Users may unsubscribe from our newsletter at any time. To make it easier to withdraw consent, each newsletter includes a link for this purpose. It is also possible to unsubscribe at any time by informing the Controller by other means. Following withdrawal, the stored personal data will be deleted or anonymised, as appropriate, by the Controller.

​

The Controller's newsletter does not contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in emails sent in HTML format to enable log file recording and analysis. This allows a statistical analysis of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, the Controller can see whether and when a User opened an email and which links in the email were clicked. The personal data collected through tracking pixels contained in newsletters is stored and analysed by the Controller in order to optimise the sending of the newsletter and to tailor the content of future newsletters even better to the User's interests. This personal data will not be passed on to third parties.

​

Contact through the Website

The Controller's Website provides forms or email addresses that allow you to make direct contact. If the User contacts the Controller by email or through contact forms, the personal data provided by the User is stored automatically.

Such personal data, voluntarily provided by the User to the Data Controller, is stored for the purpose of processing the request or contacting the User. This personal data is not transferred to third parties.

​

Social media data

As Controller, we offer you the option of using social networks to improve our business relationship and to offer Users targeted advertising through these networks.

If, as a User, you use social networks to communicate and interact with us (including Facebook, Instagram, Pinterest, YouTube or any others, current or added in the future), this is likely to involve an exchange of data between the Controller and the social network concerned.

The use of the links or applications of these social networks is subject to their respective terms of use and privacy policies. As Controller, we recommend that Users review these terms and privacy policies before using such links or applications. To make this easier, we provide at the foot of every page of the Website, or at the following link, our Cookie Policy, the list of social networks we use and the respective links to their legal documentation.

 

The Controller is not responsible for the privacy practices of these social networks or their applications, in particular with regard to confidentiality, the processing of personal data or content.

 

Security measures

The Controller undertakes to adopt the technical and organisational measures necessary to guarantee the security of personal data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the data and the risks to which it is exposed, whether from human action or from the physical or natural environment, all in accordance with the applicable legislation.

 

Confidentiality

The Controller undertakes to keep personal information strictly confidential and secret. The Controller does not disclose your data to third parties except where required by law. The Controller shall ensure that its staff, collaborators, managers and, in general, all persons with access to confidential information and personal data respect the confidentiality of the information, as well as the obligations relating to the processing of personal data established by current legislation. Accordingly, the Controller will issue such warnings and sign such documents with those persons as may be necessary to ensure compliance with these obligations. Access to personal data shall be limited to what is strictly necessary for the performance of the obligations set out in the contract. Accordingly, the Controller will issue such warnings and sign such documents with those persons as may be necessary to ensure compliance with these obligations.

 

Exercise of rights

Under the GDPR, the User has the following rights over their personal data: the right of access, rectification, erasure (right to be forgotten), restriction of processing, portability, objection, and the right not to be subject to automated individual decision-making.

 

At Lola Castellanos, we have made available to Users mechanisms that allow them to consult and modify the personal data being processed. These features are available in the User's profile tab, where Users can consult and modify this data. Each User may also delete their account.

However, if you wish to exercise your rights, you may write to lola.castellanos@lolacastellanos.com  stating which right you wish to exercise; we will explain the procedure and ask you to prove your identity so that the request can be processed.

If you are not satisfied with the way the Controller handles your personal data, you may lodge a complaint with your competent data protection authority; a list is available on the website of the European Data Protection Board:  https://edpb.europa.eu/about-edpb/board/members_en

​

Validity of this document

Lola Castellanos may amend this document whenever necessary and without prior notice. If any change that may be considered significant is introduced, Users will be notified by the means available at that time so that they can review and accept the changes. All other changes will be published on this Website, so Users are advised to review it regularly.

The Legal Notice, the Privacy Policy, the Cookie Policy, the Conditions and the other associated documents make up the set of rules defining the terms and conditions that govern access to and use of the public and private areas of this Website.

This document was originally written in Spanish. In the event of any doubt as to interpretation between this document and any translation of it, the Spanish version shall prevail.

​

Last revised: September 2024