Privacy Policy

The controller responsible for processing personal data collected through the website sanchodigital360.com is Josep Angel Sancho Sanchez (hereinafter referred to as the “Controller”), with Tax Identification Number (NIF) 07558556C, address at c. Francia, 3, 28760 Tres Cantos, telephone number 620636614 and email address joseangelsancho[at]gmail[dot]com.

The Controller is committed to respecting users' privacy and protecting their personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).

This Privacy Policy provides information about the processing of personal data provided through the website and the services offered. It does not apply to third-party websites that may be accessed through external links.

Basic information on data processing

Data Controller: Josep Angel Sancho Sanchez.
Purposes: To respond to enquiries and requests, manage the provision of products or services, and maintain relationships with users and customers.
Legal basis: Consent of the data subject, performance of a contract or implementation of pre-contractual measures, and compliance with legal obligations, depending on the purpose of processing.
Recipients: Personal data may be disclosed where required by law or where disclosure is necessary and legally justified for the provision of services. Certain service providers may access personal data on behalf of the Controller.
Data retention: Personal data will be retained for as long as necessary to fulfil the purposes of processing and, subsequently, for any periods required by law.
Rights: Access, rectification, erasure, objection, restriction of processing and data portability, where applicable, as well as withdrawal of consent.
Complaints: Data subjects may lodge a complaint with the Spanish Data Protection Agency (AEPD).
Additional information: Further details are provided in the following sections of this Privacy Policy.

Who is responsible for processing your personal data?

The Data Controller is Josep Angel Sancho Sanchez, whose identification and contact details are provided at the beginning of this Privacy Policy.

For what purposes do we process your personal data?

Personal data provided by users may be processed for the following purposes, depending on the services requested and the relationship maintained with the Controller:

To respond to enquiries, requests for information and communications received through the website.
To manage requests for products or services, as well as pre-contractual and contractual relationships.
To carry out administrative, invoicing and customer service tasks arising from the services provided.
To comply with the legal obligations applicable to the Controller.

Personal data will not be used for purposes incompatible with those for which it was collected, unless there is a legal basis permitting such processing and the applicable information obligations are fulfilled.

What is the legal basis for processing your personal data?

Depending on the relevant purpose, the processing of personal data is based on the following legal grounds:

Consent of the data subject: Where required to respond to certain requests or carry out processing activities that require the data subject's consent.
Performance of a contract or taking pre-contractual steps: To manage the contracting and provision of requested products or services.
Compliance with legal obligations: To fulfil applicable tax, accounting, administrative or other legal obligations.

Where processing is based on consent, the data subject may withdraw that consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

How long do we retain your personal data?

Personal data will be retained for as long as necessary to respond to users' requests, manage the provision of services and maintain the relevant contractual relationships.

Once the purpose for which the data was collected has been fulfilled, the data may be retained, with access restricted where required by applicable law, for the periods necessary to comply with legal obligations or address potential liabilities arising from the processing.

To whom will your personal data be disclosed?

Personal data may be disclosed to public authorities and other entities where there is a legal obligation or another legal basis justifying such disclosure.

Certain service providers may also access personal data on behalf of the Controller where necessary to provide web hosting, IT maintenance, administrative management or other contracted services, subject to the safeguards required by applicable legislation.

Where international transfers of personal data take place, they must comply with the requirements and safeguards established by the GDPR, and information about such transfers must be provided where legally required.

What are your rights regarding your personal data?

Data subjects have the following rights:

Right of access: To find out whether their personal data is being processed and obtain information about such processing.
Right to rectification: To request the correction of inaccurate or incomplete personal data.
Right to erasure: To request the deletion of their personal data where the circumstances provided for by law apply.
Right to object: To object to certain processing activities in the circumstances established by law.
Right to restriction of processing: To request that the use of their personal data be restricted in certain circumstances.
Right to data portability: To receive their personal data in a structured, commonly used and machine-readable format and transmit it to another controller where applicable.
Right to withdraw consent: To withdraw consent at any time for processing activities based on that consent.

Data subjects also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) through www.aepd.es if they consider that the processing of their personal data infringes applicable data protection legislation.

How can you exercise your rights?

Data subjects may exercise their rights by submitting a request to the Controller using the contact details provided at the beginning of this Privacy Policy.

The request must enable the data subject to be identified and specify the right they wish to exercise. Where there are reasonable doubts about their identity, additional information may be requested to confirm it.

The Controller will respond to requests within the time limits established by applicable data protection legislation.

How do we obtain your personal data?

Personal data processed through the website is primarily obtained from information provided directly by data subjects when completing forms, requesting information, contracting services or contacting the Controller.

Users are encouraged to provide accurate and up-to-date information and to communicate any relevant changes.

What categories of personal data do we process?

Depending on the services requested and the relationship maintained with the user, the following categories of personal data may be processed:

Identification data, such as first name and surname.
Contact details, such as postal address, telephone number and email address.
Data relating to enquiries or requests submitted.
Administrative, contractual or billing data, where necessary.

The personal data requested will be limited to what is adequate, relevant and necessary for the purposes of processing. Where a field is mandatory, this will be indicated in the corresponding form.

Do we use cookies?

This website may use cookies and similar technologies to ensure its proper functioning and, where applicable and supported by the necessary legal basis, for other purposes.

Users can find information about the cookies used, their purposes, and the available configuration and consent options in the Cookie Policy

What security measures do we apply?

The Controller will implement appropriate technical and organisational measures to ensure a level of security appropriate to the risks associated with the processing of personal data, in accordance with Article 32 of the GDPR.

These measures will be aimed at protecting the confidentiality, integrity and availability of personal data, taking into account the nature of the information processed and the existing risks.