Last updated: XXX [date of publication]
This Privacy Policy explains how personal data are processed through this website, in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
The controller collects only the personal data needed for the purposes set out below:
| Purpose | Legal basis |
|---|---|
| Responding to enquiries received through the contact form or by email | Your consent (Article 6.1(a) GDPR) and the steps you request (Article 6.1(b) GDPR) |
| Analysing use of the website | Your consent, given through the cookie banner (Article 6.1(a) GDPR) |
| Maintaining the security and proper functioning of the website | The controller's legitimate interest (Article 6.1(f) GDPR) |
No automated decisions or profiling are carried out using your data.
Data received through the contact form or by email are kept for as long as necessary to respond to your enquiry and any resulting correspondence, and for a maximum of two years after the last contact, unless a longer period is required by law. Cookie data are kept for the periods shown in the Cookie Policy.
Your data will not be sold or passed to third parties, except where required by law. The following service providers process data on the controller’s behalf, under data processing agreements:
Google Ireland Limited may transfer data to Google LLC in the United States. These transfers are made under the EU–US Data Privacy Framework, under which Google LLC is certified, and under the Standard Contractual Clauses approved by the European Commission. No other provider processes data outside the European Economic Area.
You may exercise the following rights at any time by writing to steve.tiley@iberiamail.com, with proof of identity:
If you consider that your data have not been processed lawfully, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), www.aepd.es.
The controller applies appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.
This website is not directed at people under the age of 14, and the controller does not knowingly collect their data.
This Privacy Policy may be updated to reflect changes in the law or in the operation of the website. The date of the latest version is shown at the top of this page.
