Privacy Policy

This policy explains how personal information is handled when you visit acostavalentina.com, send a project inquiry, or subscribe to the newsletter.

1. Who is responsible for your information?

Controller

Valentina Acosta

Tax identification

[NIF to be added]

Business address

[Address to be added]

Privacy contact

[Email address to be added]

2. Information collected and why it is used

Project inquiries

The contact form may collect your name, email address, the type of service you are interested in, and the information you choose to provide about your project. This information is used to respond to your inquiry, understand your requirements, and, when requested, take steps toward working together.

The legal basis is taking steps at your request before entering into a contract. Where an inquiry does not concern a potential contract, the basis is the legitimate interest in receiving and responding to correspondence.

Newsletter subscriptions

If you subscribe, the information requested by the subscription form—your email address and, if offered and supplied, your first name—is used to send the newsletter. Subscription uses a double opt-in process, so you must confirm your address before being added to the active mailing list.

The legal basis is your consent. You can withdraw it at any time by using the unsubscribe link in any newsletter. Withdrawing consent does not affect processing that took place before withdrawal.

Website operation and measurement

Technical request and security information may be processed when the site is delivered through Cloudflare. Cloudflare Web Analytics is also enabled to provide aggregated information about site performance and visits. Cloudflare states that Web Analytics does not collect or use visitors’ personal data.

3. Service providers

Personal information is not sold. It may be processed by service providers used to operate the website and its forms:

• Tally, which hosts and processes project-inquiry form submissions on behalf of the controller.
• Brevo, which manages newsletter subscriptions, proof of consent, mailing lists, delivery, and unsubscriptions.
• Cloudflare, which hosts and protects the website and provides privacy-focused web measurement.

These providers process information under their contractual data-protection terms. Tally and Brevo state that their core form and contact databases are hosted in the European Union. Some providers or their subprocessors may process limited information outside the European Economic Area using the safeguards required by applicable data-protection law.

4. How long information is kept

• Project inquiries are normally kept for up to 12 months after the last meaningful contact, unless a working relationship begins or a longer period is needed to establish, exercise, or defend a legal claim.
• Newsletter information is kept while you remain subscribed. After you unsubscribe, limited suppression and consent records may be retained for as long as reasonably necessary to honor your choice and demonstrate compliance.
• Information relating to clients is retained for the periods required by tax, accounting, and other applicable legal obligations.

5. Your rights

Depending on the circumstances, you may request access to, correction or deletion of your personal information; restriction of processing; data portability; or object to processing based on legitimate interests. You may also withdraw consent at any time.

To exercise a right, contact the privacy email shown above and identify the request clearly. Additional information may be requested when reasonably necessary to verify your identity. You also have the right to complain to the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.

6. Required information and sensitive information

Fields marked as required are necessary to respond to an inquiry or process a subscription. Please do not send health information, government identity documents, financial account details, or other sensitive personal information through the project-inquiry form.

7. Automated decisions

Personal information submitted through this website is not used to make solely automated decisions that produce legal or similarly significant effects.

8. Changes to this policy

This policy may be updated when the website, its providers, or legal requirements change. The date at the top identifies the latest version.