This is a courtesy translation of the Spanish original. In the event of any discrepancy, the Spanish version prevails.
This policy explains how personal data is processed on this website, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and the guarantee of digital rights (LOPDGDD).
1. Data controller
- Controller
- Dailyng Coromoto Ayestarán Díaz
- Tax ID (NIF)
- 60136922H
- Address
- Calle Sauco 13, 3.º B, 28039 Madrid (Spain)
- contacto@daiayestaran.com
- Profession
- Lawyer, member of the Madrid Bar Association (ICAM), no. C-139281
2. What data is processed
- Data you provide when you write by email: your name, your email address and the information you include in your message.
- Technical browsing data: IP address, browser type and date and time of access, which the server records for security reasons.
This site has no forms, registration area or newsletter, and does not send commercial communications. It is not aimed at children under 14.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Responding to inquiries and messages received by email. | Taking steps at the request of the data subject prior to entering into a contract, and legitimate interest in handling the communication (Art. 6.1.b and 6.1.f GDPR). |
| Managing the professional relationship once an engagement is formalized. | Performance of a contract and compliance with legal obligations (Art. 6.1.b and 6.1.c GDPR). |
| Maintaining the security and proper functioning of the site. | Legitimate interest (Art. 6.1.f GDPR). |
| Displaying LinkedIn posts through the Elfsight module. | Consent, given through the cookie settings (Art. 6.1.a GDPR). |
4. Confidentiality and professional secrecy
Information received in an inquiry is treated confidentially and, where applicable, under the professional secrecy established by the General Statute of the Spanish Legal Profession.
5. Retention period
Data from an inquiry is kept for as long as needed to handle it and, afterwards, for the periods during which liabilities could arise. If the inquiry leads to an engagement, the data is kept for the duration of the professional relationship and for the periods required by tax, professional-ethics and statute-of-limitations rules. Once those periods have passed, it is securely deleted.
6. Recipients
Data is not disclosed to third parties, except where legally required. The following providers may access it, as processors and solely to provide their service:
- Hostinger International Ltd., web hosting and email provider.
- Elfsight, which provides the LinkedIn posts module.
7. International transfers
Some of these providers may process data outside the European Economic Area. In that case, transfers are made with the safeguards provided by the GDPR, such as European Commission adequacy decisions or standard contractual clauses.
8. Your rights
You may exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent you have given, by writing to contacto@daiayestaran.com and stating the right you wish to exercise. You may be asked to verify your identity.
If you believe that the processing does not comply with the regulations, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es).
9. Security
Technical and organizational measures appropriate to the risk are applied to protect data against loss, alteration or unauthorized access, in accordance with Article 32 of the GDPR.
10. Changes to this policy
This policy may be updated to reflect regulatory changes or changes to the site itself. The date of the latest update appears at the top of the page.