PRIVACY POLICY

In accordance with the General Data Protection Regulation (GDPR - EU 2016/679) and the Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), we inform you that:

Company: PASTORIA PROJECT, S.L.

Tax ID (CIF): B57664179

Registered Address: Cno. Son Rapiña, núm. 8 1ºA, 07013 Palma – Islas Baleares (España)

Email: [email protected]

Phone: +34 971 791298

PASTORIA PROJECT, S.L. is the Data Controller responsible for the processing of your personal data.

We may collect and process the following categories of personal data:

Contact Information: Name, email address, phone number, company name, and postal address.

Communication Data: Any information you provide when contacting us through forms, email, or phone.

Technical Data: IP address, browser type, device information, cookies, and usage data collected through our website.

Professional Data: Job title, professional interests, and business requirements when relevant to our services.

We process your personal data based on the following legal grounds:

Consent (Art. 6.1.a GDPR): When you voluntarily provide your data through contact forms or subscribe to communications.

Contractual Necessity (Art. 6.1.b GDPR): To respond to your inquiries and provide requested services.

Legitimate Interest (Art. 6.1.f GDPR): To improve our services, website functionality, and business operations.

Legal Obligation (Art. 6.1.c GDPR): To comply with applicable tax, accounting, and regulatory requirements.

Purposes:

• Responding to inquiries and service requests

• Managing business relationships and contracts

• Sending commercial communications (with your consent)

• Website analytics and improvement

• Compliance with legal and regulatory obligations

Your personal data will be retained for the following periods:

Contact inquiries: Up to 2 years from last contact, unless a business relationship is established.

Contract data: Duration of the contractual relationship plus applicable legal retention periods (minimum 6 years for tax purposes in Spain).

Marketing consents: Until you withdraw consent or 3 years of inactivity.

Technical data: As specified in our Cookie Policy (typically 13 months maximum for analytics cookies).

After these periods, data will be securely deleted or anonymized unless retention is required by law.

We do not sell your personal data to third parties. We may share your data with:

Service Providers: IT services, hosting providers, analytics platforms (e.g., PostHog for website analytics) under data processing agreements.

Professional Advisors: Lawyers, accountants, and auditors when necessary for legal or business purposes.

Legal Requirements: Public authorities when required by law.

International Transfers: Some of our service providers may be located outside the EU/EEA. In such cases, we ensure adequate safeguards through:

• Standard Contractual Clauses approved by the European Commission

• Adequacy decisions by the European Commission

• Other legally approved transfer mechanisms

All transfers comply with Chapter V of the GDPR.

You have the following rights regarding your personal data:

Right of Access (Art. 15 GDPR): Obtain confirmation of whether we process your data and access to such data.

Right to Rectification (Art. 16 GDPR): Correct inaccurate or incomplete personal data.

Right to Erasure (Art. 17 GDPR): Request deletion of your data when legally permissible.

Right to Restriction (Art. 18 GDPR): Limit the processing of your data in certain circumstances.

Right to Data Portability (Art. 20 GDPR): Receive your data in a structured, commonly used format.

Right to Object (Art. 21 GDPR): Object to processing based on legitimate interest or for direct marketing.

Right to Withdraw Consent: When processing is based on consent, you may withdraw it at any time.

Right to Lodge a Complaint: File a complaint with the Spanish Data Protection Authority (AEPD - www.aepd.es) or your local supervisory authority.

To exercise your rights, contact us at:

Email: [email protected]

Postal address: Cno. Son Rapiña, núm. 8 1ºA, 07013 Palma – Islas Baleares (España)

We will respond to your request within one month (extendable by two additional months if necessary).

We implement appropriate technical and organizational security measures to protect your personal data against:

• Unauthorized access, disclosure, or destruction

• Accidental loss, alteration, or damage

• Unlawful processing

Security measures include encryption, access controls, secure servers, and regular security audits. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

We will only send you marketing communications if you have given explicit consent. You can:

• Withdraw consent at any time by clicking "unsubscribe" in our emails

• Contact us at [email protected] to opt-out

• Update your communication preferences

Opting out of marketing communications does not affect communications necessary for service delivery or legal compliance.

We may update this Privacy Policy periodically to reflect changes in:

• Our data processing practices

• Legal or regulatory requirements

• Service offerings

The "Last Updated" date at the top indicates the latest revision. We encourage you to review this policy regularly. Significant changes will be communicated through our website or by email where appropriate.

For any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact:

PASTORIA PROJECT, S.L.

Email: [email protected]

Phone: +34 971 791298

Address: Cno. Son Rapiña, núm. 8 1ºA, 07013 Palma – Islas Baleares (España)

Supervisory Authority:

Agencia Española de Protección de Datos (AEPD)

C/ Jorge Juan, 6, 28001 Madrid, Spain

Website: www.aepd.es