Privacy policy

1. Who is responsible for your data

Controller

Vanessa Encina Götzl

Email

hola@vaniencina.com

This policy follows Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on data protection and the guarantee of digital rights (LOPDGDD).

2. What data is collected

This is a static website. There are no user accounts, no basket and no private area. There are only two ways you can give us data, and both are voluntary:

Newsletter subscription

Your email address. Nothing else: no name, no phone number, no date of birth.

If you write to the contact address

Whatever you include in your message, usually your email address and what you want to say.

3. What it is used for, and on what legal basis

Sending you the newsletter

Letting you know when a new book comes out. Legal basis: your consent (article 6.1.a GDPR), given by ticking the box on the form.

Replying to your messages

Answering what you ask. Legal basis: your consent when you write.

There is no automated decision-making and no profiling. Your email address is not passed to third parties for advertising.

4. Your consent, and how to withdraw it

You will only receive the newsletter if you asked for it by ticking the box on the form. Nothing is sent to anyone who did not request it.

You can withdraw your consent at any time: every email carries an unsubscribe link at the bottom, and you can also ask by writing to hola@vaniencina.com. Withdrawing it does not affect the lawfulness of processing carried out beforehand.

5. How long data is kept

• The subscription email address: for as long as you stay subscribed. It is removed from the list when you unsubscribe.
• Messages you send: for as long as needed to reply and, afterwards, for the legal limitation period for any liability.

6. Who else sees your data

Personal data is neither sold nor given away. To work, the site relies on providers acting as processors, under the contract required by article 28 GDPR:

MailerLite

Newsletter delivery platform. Stores your email address and the date you gave consent.

Cloudflare

Hosting and delivery of the site.

Some of these providers may process data outside the European Economic Area, mainly in the United States. Where that happens, the transfer relies on the EU–US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

Data may also be disclosed to public authorities where the law requires it.

7. Your rights

In relation to your personal data you have the right to:

• Access it and know what is done with it.
• Have it corrected if it is inaccurate.
• Have it erased — the so-called right to be forgotten.
• Restrict its processing in certain cases.
• Object to it being processed.
• Receive it in a structured format and take it to another service (portability).
• Withdraw your consent at any time.

To exercise any of these, write to hola@vaniencina.com saying which right you want to exercise and attaching a copy of a document proving your identity. It is free, and you will get an answer within one month.

If you believe your request has not been handled properly, you can complain to the Spanish Data Protection Agency (AEPD), calle Jorge Juan 6, 28001 Madrid — www.aepd.es.

8. Children

This site is not aimed at children under 14 and their data is not knowingly collected. If a subscription from a child under that age is found without the authorisation of a parent or guardian, it will be deleted.

9. Security

The site is always served over an encrypted connection (HTTPS). The providers used apply appropriate technical and organisational measures to protect data against loss, misuse or unauthorised access.

10. Changes to this policy

This policy may be updated if the law or the way data is handled changes. The date of the last update appears at the top of this page. If a change matters to people who are subscribed, they will be told by email.