Additional Information on Data Protection
What is and is not done with your personal data on this website is explained here.
This policy explains how the personal information of all individuals who interact with Lucía Medina Huerta through this website will be processed and protected. Please make sure to read all sections of the Legal Notice, Cookie Policy and this Privacy Policy before using this website.
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, the Owner informs you that, by accepting this Privacy Policy, you give your express, informed, freely given and unequivocal consent for the data you provide, to which the technical and organisational security measures established by current regulations apply, to be processed by the Owner as data controller.
Who is responsible for this website?
Controller: Lucía Medina Huerta
Trade Name: Lucía Medina Huerta
Tax ID (NIF): available upon justified request
Address: Calle Zaida 42, 28019 Madrid
Email: lucia.medina.huerta@gmail.com
Business Activity: Project Management Consulting
Professional Qualifications: Telecommunications Engineer, Master’s Degree in Management, Scrum Master.
What personal data is collected on this website?
For the purposes established in this Privacy Policy, the Owner collects and processes the following Personal Data, depending on the products or services requested through this website:
- Identification Data: first name, surname.
- Contact Data: email address.
- Browsing Data: IP address, device type and identification, browser type, domain through which you access the website, browsing data and activity on the website.
What is the legal basis for processing this data?
- Performance of a contract with the Owner for the provision of services, publication of advertisements and management of the services requested.
- User consent for contact, content subscriptions and the sending of commercial communications via email, cookies or messaging systems.
- Legitimate interest of the data controller in protecting users of the Owner’s website against abuse and fraud in the use of our services.
For what purposes will we process your data?
This website contains several forms, and the information collected through them will be used as follows:
- Content subscription forms: there are several forms for activating subscriptions. The data provided will be used exclusively to send the Newsletter and keep you updated on news and occasional offers exclusive to Website subscribers.
- Comments form: personal data entered in the comments form will be used exclusively to moderate and publish comments.
- Contact form: there is also a contact form for enquiries, suggestions or professional communication. In this case, the email address provided will be used to respond to these enquiries and send the information requested by the user through the website.
- Registration form: in this case, we request the following personal data: name and email address, so that you can create an account in our system and access its features.
- Download systems: this website may periodically offer downloadable content in text, video and audio formats. In this case, an email address is required to activate the subscription form. Your information will be used for the purposes indicated for subscribers.
Retention Period for Personal Data
Customer data: The retention period for personal data will vary depending on the service contracted by the customer. In all cases, it will be kept for the minimum period necessary and may be retained for the following periods:
- 4 years: Law on Social Order Offences and Penalties (obligations relating to affiliation, registration, deregistration, contributions, salary payments, etc.); Articles 66 et seq. of the General Tax Law (accounting records, etc.).
- 5 years: Article 1964 of the Spanish Civil Code (personal actions without a specific limitation period).
- 6 years: Article 30 of the Commercial Code (accounting books, invoices, etc.).
- 10 years: Article 25 of the Law on the Prevention of Money Laundering and Terrorist Financing.
Subscriber data: From the time the user subscribes until they unsubscribe.
Potential customer data: Data will be retained for the duration of the established business relationship and, once it has ended, for two years, unless the user requests its deletion earlier.
Any person has the right to obtain confirmation as to whether the Owner is processing personal data concerning them.
Interested parties have the right to:
- Request access to personal data concerning them.
- Request its rectification or deletion.
- Request its cancellation.
- Request restriction of its processing.
- Object to processing.
- Request data portability.
If you have given your consent for a specific purpose, you have the right to withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
If you believe that your rights regarding the protection of your personal data have been infringed, particularly if you have not obtained satisfaction in exercising your rights, you may lodge a complaint with the competent Supervisory Authority through its website: https://www.aepd.es/es.
To exercise these rights, you can write to lucia.medina.huerta.com.
A form is available for exercising your rights, which you may request by email or, if you prefer, you may use those provided by the Spanish Data Protection Agency or third parties.
These forms must be electronically signed or accompanied by a photocopy of your ID document.
If you are represented by another person, they must attach a copy of their ID document or the form must be signed using their electronic signature.
Forms may be submitted in person, sent by post or by email to the address of the controller indicated at the beginning of this document.
Directory Services
The inclusion of directory services will be referenced on the website itself. The Website will endeavour to ensure that the profiles and advertisements appearing on the website contain truthful and up-to-date information. However, it cannot always guarantee the accuracy of such data.
The information and other content of advertisements published in professional directories are provided by advertisers, and therefore the Website is not responsible for any inaccuracies or errors they may contain, nor does it guarantee in any way the experience, integrity or responsibility of advertisers or the quality of their services.
Advertisements published in professional directories will remain on the portal until they are removed or suspended by the advertiser or by the directory itself. The directory is not responsible if, once removed from its databases, advertisements continue to be indexed by search engines external to this portal.
Any contractual or non-contractual relationship entered into by the user with advertisers or third parties contacted through this portal shall be deemed to have been entered into exclusively between the user and the advertiser and/or third party. The user understands and accepts that the Website acts solely as an advertising channel or medium and therefore accepts no liability for damages of any kind that may arise from negotiations, conversations and/or contractual or non-contractual relationships with advertisers or third parties contacted through this portal.
Notification and Reporting of Data Breaches
The Website takes data security very seriously and has implemented appropriate measures to protect your personal information. However, in the event of a data breach, whether accidental or unlawful, resulting in the destruction, loss, alteration, unauthorised disclosure of or access to personal data, affected users will be notified without undue delay.
The Owner will inform users of any breach that may put their rights and freedoms at risk, providing details of the nature of the breach, the data affected and the measures taken to address the issue.
If necessary and in accordance with legal obligations, the breach will also be reported to the competent data protection authority within 72 hours of becoming aware of it, as required by applicable data protection regulations.
For any questions or concerns regarding the security of your data, please feel free to contact us.
Data Confidentiality and Security
The Website undertakes to use and process users’ personal data while respecting its confidentiality and in accordance with its intended purpose, and undertakes to comply with its obligation to safeguard such data and to adopt all necessary measures to prevent alteration, loss, unauthorised processing or access, in accordance with applicable data protection regulations.
(This website includes an SSL certificate, a security protocol that ensures your data is transmitted securely and with integrity; in other words, data transmission between a server and the web user is fully encrypted.)
The Website cannot guarantee the absolute security of the Internet and therefore cannot guarantee that data will not be breached through fraudulent access by third parties.
With regard to the confidentiality of processing, the Website will ensure that any person authorised by the Website to process customer data, including its staff, collaborators and suppliers, is subject to an appropriate duty of confidentiality, whether contractual or legal.
If a security incident occurs, the Owner will notify the customer without undue delay and provide relevant information about the security incident as it becomes known or when reasonably requested by the customer.
Accuracy and Truthfulness of Data
As a user, you are solely responsible for the truthfulness and accuracy of the data you submit to the Website, releasing the Owner from any liability in this regard. Users guarantee and are responsible, in all cases, for the accuracy, validity and authenticity of the personal data provided and undertake to keep it duly updated when necessary. The user agrees to provide complete and accurate information in the contact or subscription form.
Revocability
Consent granted for both the processing and transfer of personal data may be revoked at any time by notifying the Owner under the terms established in this policy for exercising ARCO rights. Such revocation will not have retroactive effect.
Changes to the Privacy Policy
The Owner reserves the right to modify this policy in order to adapt it to legislative or case-law developments, as well as industry practices. In such cases, changes will be announced on this page with reasonable notice before their implementation.