Last updated: 26 August 2025

1. Data Controller

Owner: Nuria Zardoya Lasheras
Email: nuriazardoyalasheras@gmail.com
Website: https://nuriazardoya.es

2. What Data We Collect and For What Purpose

We collect the personal data you provide through the contact form and, where applicable, through registration forms for specific activities or programmes (for example, the “Christmas Challenge 2025”).

The data processed may include: full name, email address, telephone number, the reason for your enquiry and any additional information you give us in your message.

We process this data for the following purposes:

To manage and respond to your enquiries or requests for information.
To manage the provision of the services I offer (consultations, challenges, programmes, etc.).
Where applicable, to process payments and invoicing associated with those services and to comply with accounting and tax obligations.

We will not use your data for marketing purposes, newsletters or any other purpose without your prior explicit consent.

3. Legal Basis for Data Processing

The legal basis for processing your data depends on the purpose:

Managing enquiries and contact: your consent, given when you submit the form.
Provision of services and challenges (including payments): the performance of a contract or of pre-contractual measures.
Accounting and tax obligations: compliance with the applicable legal obligations.

You may withdraw your consent at any time, without retroactive effect.

4. Data Sharing

Your data is confidential and will not be disclosed to third parties, except where there is a legal obligation or where it is necessary in order to provide the service you have requested.

In particular, we use providers that act as data processors or as independent services:

Netlify, as the website hosting provider.
Google, for technical services such as reCAPTCHA and, where applicable, web analytics.
PayPal, as the payment platform when you pay for a challenge or a service. PayPal processes your payment data as an independent controller; you can consult its privacy policy on its own website.

To protect the forms against automated submissions we use Google reCAPTCHA (Google LLC). This service analyses interaction patterns for security purposes and may carry out technical processing of data (for example, IP address, browser agent and device fingerprint) on the basis of our legitimate interest in preventing abuse of the service. More information in Google's Privacy Policy.

5. Data Retention

The data you provide will be kept for as long as is strictly necessary to handle your enquiry or until you request its erasure.

If you go on to contract a service or take part in a programme (for example, the Christmas Challenge), we will keep your data for as long as the professional relationship lasts and, afterwards, for the periods required by accounting and tax legislation (normally up to 6 years).

6. Your Rights

You have the right to access, rectify, erase and object to the processing of your data. You can exercise your rights by sending an email to the address given in section 1.

If you believe your rights have not been respected, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

Privacy Policy