Privacy policy

1. Data controller

The controller of the personal data is:

• Owner: Elisa Peteiro Pérez
• Tax ID (DNI/NIF): 34962212G
• Address: Avda. Portugal 63, 32002 Ourense (Spain)
• Email: art@elisapeteiro.com
• WhatsApp: +34 988 09 36 11
• Website: www.elisapeteiro.com and its subdomains

2. Purpose

The purpose of this Privacy Policy is to inform users about how Elisa Peteiro may collect and process their personal data through this website and within the framework of the communications and business relationships arising from her professional activity.

Personal data will be processed in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights, and other applicable regulations.

3. Personal data that may be processed

This website has no user accounts. Depending on the user’s interaction with the website and on the relationship with Elisa Peteiro, the following data may be processed:

• First and last name.
• Company or professional activity.
• Email address.
• Phone number, when provided.
• Postal address, when necessary for the business relationship.
• Data voluntarily included in messages or requests.
• Information needed to manage quotes and business proposals.
• Information needed to manage contracts and licenses of use.
• Data needed for administrative, tax and accounting management, including billing and payment details.
• Technical data needed to ensure the security and operation of the website (for example, the IP address processed by the hosting provider).

Elisa Peteiro will process only the data that is adequate, relevant and necessary for each purpose.

4. Source of the data

Personal data may be obtained directly from the user when they:

• Get in touch by email or WhatsApp.
• Ask for information about a collection or design.
• Request a quote.
• Ask for information about a license.
• Start a business relationship.
• Formalize a license or contract.
• Communicate with Elisa Peteiro through other enabled professional channels.

Likewise, certain technical data may be obtained automatically while browsing, depending on the technologies used on the website.

5. Purposes of the processing

Personal data may be processed for the following purposes:

• Handling inquiries and requests: answering messages, inquiries, information requests and communications made by the user.
• Managing quotes and business proposals: preparing and sending quotes, proposals, license conditions and other information related to the services offered.
• Managing business relationships: managing the contractual and business relationship with companies, professionals and clients.
• Managing licenses: managing the acquisition, granting, monitoring and compliance of licenses of use over the designs. This may include information about the client, the licensed design or collection, authorized uses, territory, duration, exclusivity and other agreed conditions.
• Compliance with legal obligations: complying with the applicable legal, tax, accounting, administrative and contractual obligations.
• Security: preventing fraudulent use, abuse, unauthorized access and other activities that could compromise the security of the website or of the professional activity.
• Commercial communications: where there is a valid legal basis for it, communications may be sent regarding the services, news, collections or professional activity of Elisa Peteiro. The user may object to receiving commercial communications at any time.

No automated decisions are made and no profiles are created with the data.

6. Legal basis

The legal basis for the processing may be, depending on the case:

• The consent of the data subject.
• The performance of a contract or the application of pre-contractual measures.
• Compliance with legal obligations.
• Elisa Peteiro’s legitimate interest, where applicable and after the user’s rights and interests have been properly weighed.

Where the processing is based on consent, the user may withdraw it at any time, without affecting the lawfulness of the processing carried out beforehand.

7. Data retention

Personal data will be kept for the time necessary to fulfill the purpose for which it was obtained.

• Inquiries that do not become a project: the time needed to handle them and, at most, 12 months.
• Where there is a contractual relationship: for as long as the relationship lasts and, afterwards, for the periods needed to meet legal obligations or deal with possible liabilities (in general, between four and six years for tax and accounting documentation).
• Backup copy of the designs of each project: for as long as it is needed to resend the files or provide new services, unless its deletion is requested.
• Data processed solely on the basis of consent: until that consent is withdrawn, unless another legal basis allows it to be kept.

8. Recipients of the data

Personal data will not be sold or passed on to third parties for commercial purposes unrelated to Elisa Peteiro’s activity.

Providers who offer services needed for the operation of the professional activity may have access to certain data, such as web hosting (Cloudflare, Inc.), email, file delivery (WeTransfer), payment services (PayPal or the bank used), messaging (WhatsApp, if the user communicates through that channel, in which case its own terms and privacy policy also apply), administrative management and professional advice.

These providers will act, where applicable, following Elisa Peteiro’s instructions and with the safeguards required by the applicable regulations.

Likewise, data may be disclosed to public administrations, authorities, bodies or courts when there is a legal obligation to do so.

9. International transfers

Some technology providers used to offer digital services may be located outside the European Economic Area (for example, in the United States) or use infrastructure located internationally.

When international data transfers take place, the safeguards required by the applicable data protection regulations will be adopted, such as standard contractual clauses or the provider’s adherence to the EU-US Data Privacy Framework.

10. User rights

The user may exercise, where applicable, the following rights:

• Right of access.
• Right to rectification.
• Right to erasure.
• Right to object.
• Right to restriction of processing.
• Right to data portability.
• Right to withdraw consent.

To exercise these rights, a request can be sent to art@elisapeteiro.com. The request must allow the data subject to be identified and specify the right they wish to exercise.

The user also has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) if they consider that the processing of their personal data does not comply with the applicable regulations.

11. Security

Elisa Peteiro will adopt reasonable and appropriate technical and organizational measures to protect personal data against loss, destruction, unauthorized access, alteration or improper disclosure.

However, no electronic communication or storage system can guarantee absolute security.

12. Data provided by third parties

The user guarantees that the personal data they provide is true, accurate and up to date.

When providing personal data belonging to third persons, the user guarantees that they have a legitimate basis to do so and that they have informed those persons where necessary.

13. Minors

The website and the services are aimed at companies and professionals, and not specifically at minors.

Where the consent of the minor or their legal representatives is required for a given processing, the conditions and limits established by current legislation will apply.

14. Updates

This Privacy Policy may be modified to adapt to legislative, technical or organizational changes or changes in the tools used by Elisa Peteiro. We recommend checking this page periodically.