Privacy Policy and data protection

At My Spanish Online, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, use, and protect your personal information in compliance with European GDPR regulations and other applicable laws.

Laws Governing This Privacy Policy

This Privacy Policy complies with the following legal frameworks:

  • Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR): Governing the protection and free movement of personal data within the EU.
  • Organic Law 3/2018 (LOPD-GDD): Protection of Personal Data and Guarantee of Digital Rights in Spain.
  • Royal Decree 1720/2007: Regulations for developing data protection laws in Spain.
  • Law 34/2002 (LSSI-CE): Services of the Information Society and Electronic Commerce.

Data Controller Details

The controller responsible for your personal data is:

If you have questions about this Privacy Policy or your personal data, please contact us.

How We Collect and Process Personal Data

We collect personal data through forms available on our website. This data may include, but is not limited to:

  • Your name, email address, and any other information you voluntarily provide.
  • Automatically collected data, such as IP addresses and website usage statistics.

All data collected is processed for specific purposes outlined below and handled according to strict security protocols.

Why We Collect Your Data

We collect and process personal data to:

  1. Fulfill our commitments to you, such as responding to inquiries or providing requested services.
  2. Improve your user experience by tailoring our content and services.
  3. Conduct statistical analysis and improve website performance.

We will always inform you of the specific purpose for which your data is collected at the time it is provided.

Principles of Data Processing

Your personal data is handled according to the following GDPR principles:

  1. Lawfulness, Fairness, and Transparency: We will only process data after obtaining your informed consent.
  2. Purpose Limitation: Data is collected for specified, legitimate purposes.
  3. Data Minimization: We collect only the data necessary for each purpose.
  4. Accuracy: We strive to keep your data accurate and up to date.
  5. Retention Limitation: Data is retained only for as long as necessary.
  6. Integrity and Confidentiality: We employ security measures to protect your data from unauthorized access or breaches.

Your Rights Under GDPR

As a user, you have the following rights regarding your personal data:

  • Access: Request information about the data we hold about you.
  • Rectification: Request corrections to inaccurate or outdated data.
  • Erasure ("Right to Be Forgotten"): Request deletion of your data when it is no longer needed.
  • Restriction of Processing: Limit how we process your data under specific conditions.
  • Data Portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to certain types of data processing, such as direct marketing.

To exercise your rights, email us at [email protected]. Include your full name, contact details, and specific request.

Retention Period

We will store your personal data for a maximum of two years or until you request its deletion.

Sharing Your Data

Your data may be shared with trusted third-party services, including:

  • Google Analytics and Google Ads
  • Hostinger (our hosting provider)
  • Webmail services

If we transfer data to a third country or international organization, we will ensure compliance with GDPR and inform you of the safeguards in place.

Data protection

We use technical and organizational measures to protect your data, including SSL encryption for secure data transmission. While we strive to ensure full security, no system is 100% foolproof. If a data breach occurs, we will notify you promptly, as required by GDPR.

Cookies and Tracking Technologies

Our website uses cookies to enhance your browsing experience and analyze website traffic. You can manage your cookie preferences through your browser settings. For more information, please see our Cookie Policy.

Data Protection for Minors

We do not knowingly collect data from children under 14 years of age. If you believe a minor has provided personal data, please contact us to delete this information.

Links to Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these sites. Please review their privacy policies when visiting them.

Complaints

If you believe we are not handling your data in accordance with applicable laws, you can file a complaint with your local data protection authority. In Spain, contact the Spanish Data Protection Agency: www.aepd.es.

Updates to This Privacy Policy

We reserve the right to update this Privacy Policy as needed. Updates will be posted on this page, with the most recent update noted at the bottom.

Last Updated: January 25, 2025