PRIVACY POLICY
In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR) and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), users are hereby informed about the processing of personal data carried out through the website carlotarios.com.
1. Data Controller
Identity: Carlota Rios
Spanish Tax Identification Number (NIF): 11794100E
Address: Calle Eduardo Barreiros 145, Madrid
Email address: escarlota@yahoo.es
2. Processing of Personal Data
The carlotarios.com website does not provide contact forms or newsletter subscription systems.
When a user contacts the data controller through the contact methods available on the website, any information voluntarily provided by the user will be processed for the purpose of handling and responding to their request, enquiry or communication.
Legal basis: the user’s consent, in accordance with Article 6.1(a) of the GDPR, where the user voluntarily provides their personal data in order to establish contact.
Users should only provide the information necessary to make their enquiry or communication.
3. Data Retention Period
Personal data provided through the available contact methods will be retained for as long as necessary to handle and manage the communication and, subsequently, for the periods established by applicable law where there is a legal obligation to retain the data or where liabilities may arise from the processing.
4. Data Recipients
As a general rule, personal data will not be disclosed to third parties, except where there is a legal obligation to do so.
Personal data may be processed by technology service providers required for the operation of the website and the communication services used by the data controller, where necessary to manage communications received.
5. International Data Transfers
Where any of the technology service providers used involves an international transfer of data outside the European Economic Area, such transfer will be carried out in accordance with the safeguards provided for under applicable data protection legislation.
6. Users’ Rights
Where applicable, users may exercise the following rights in relation to their personal data:
Right of access: to find out whether their personal data are being processed.
Right to rectification: to request the correction of inaccurate or incomplete data.
Right to erasure: to request the deletion of their data where applicable.
Right to restriction of processing: to request the restriction of processing in certain circumstances.
Right to object: to object to the processing of their data where the legally established circumstances apply.
Right to data portability: to request that their personal data be provided in a structured, commonly used and machine-readable format, where applicable.
Right to withdraw consent: to withdraw consent previously given where the processing is based on consent.
To exercise these rights, users may submit a request to:
Email address: [TO BE PROVIDED]
In certain circumstances, additional information may be requested in order to verify the identity of the person making the request.
7. Right to Lodge a Complaint
If a user considers that the processing of their personal data does not comply with applicable data protection legislation, or that their rights have not been properly addressed, they may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD).
Further information is available at www.aepd.es.
8. Data Security
The data controller adopts appropriate technical and organisational measures to ensure a level of security appropriate to the risk and to protect personal data against unauthorised processing, loss, destruction or accidental or unlawful alteration.
9. Updates to this Privacy Policy
This Privacy Policy may be amended where necessary to reflect changes in legislation, technology or the processing activities carried out through the website.
Last updated: September 2026