Privacy Policy
How Valenstaro collects, uses and protects your personal data.
Who is responsible for processing your data?
The data controller for personal information collected through this website is Valenstaro, with registered address at C. Gabriel Miró, Nº 3, Edificio Wertice escalera 1 Planta 4 puerta 9, 41704 Dos Hermanas, Sevilla, Spain. NIF: J26946024.
You can contact us regarding data protection matters at: info@valenstaro.com or by post at the address above.
What personal data do we collect?
We collect personal data that you provide directly to us through the forms on this website. This includes:
- Name and surname
- Email address
- Telephone number
- The content of messages you send to us
- The subject or type of enquiry you select
We also collect certain technical data automatically when you visit our website, including your IP address, browser type, pages visited and time of visit. This data is collected through cookies and similar technologies. Please refer to our Cookie Policy for further details.
For what purposes do we use your data?
We use the personal data you provide for the following purposes:
- To respond to your enquiries and requests for information about our services
- To process and manage appointment bookings for economic assessments
- To provide you with information about our training courses and community programs
- To manage your participation in community activities if you choose to join
- To comply with our legal obligations under applicable Spanish and European Union law
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
What is the legal basis for processing?
The legal bases under the General Data Protection Regulation (GDPR), as implemented in Spain through Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), for our processing activities are:
- Consent (Article 6(1)(a) GDPR): when you tick the privacy checkbox on our forms, you give us consent to process your data to respond to your enquiry.
- Legitimate interests (Article 6(1)(f) GDPR): for the technical operation of the website and security purposes.
- Legal obligation (Article 6(1)(c) GDPR): where we are required to retain or process data to comply with applicable law.
You may withdraw your consent at any time by contacting us at info@valenstaro.com. Withdrawal does not affect the lawfulness of processing before withdrawal.
How long do we retain your data?
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by applicable law. Specifically:
- Enquiry and contact form data is retained for up to 2 years from the date of your last contact with us, unless you request earlier deletion.
- Appointment booking data is retained for the duration of any ongoing relationship and for up to 3 years thereafter.
- Technical and analytics data is retained for up to 13 months in accordance with standard analytics practices.
After these periods, data is securely deleted or anonymised.
Do we share your data with third parties?
We do not sell, rent or trade your personal data to third parties. We may share data with trusted service providers who assist us in operating the website and delivering our services. These providers act as data processors under our instructions and are bound by appropriate data processing agreements.
We may also disclose data where required by law, court order or competent authority, or to protect the rights, property or safety of Valenstaro, our users or others.
Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR.
What are your rights under data protection law?
Under the GDPR and LOPDGDD, you have the following rights regarding your personal data:
- Right of access: to obtain confirmation of whether we process your data and to receive a copy.
- Right to rectification: to request correction of inaccurate or incomplete data.
- Right to erasure: to request deletion of your data in certain circumstances.
- Right to restriction: to request that we limit processing in certain circumstances.
- Right to data portability: to receive your data in a structured, machine-readable format.
- Right to object: to object to processing based on legitimate interests.
- Right to withdraw consent: at any time where processing is based on consent.
To exercise any of these rights, contact us at info@valenstaro.com. We will respond within one month. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at www.aepd.es.
How do we protect your data?
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or alteration. These measures include secure data transmission protocols (HTTPS), access controls and regular security reviews.
While we take reasonable steps to protect your data, no transmission over the internet or electronic storage system is completely secure. We encourage you to contact us if you have any concerns about data security.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date of the most recent revision is shown at the top of this page. We encourage you to review this policy periodically.
If changes are material, we will take reasonable steps to notify you, which may include a notice on our website.