1. Data Controller The data controller for the personal data collected through this website is: Profesora Mónica Sánchez Román

• DNI/NIE: 12345678A
• Registered Address: Calle Falsa 123, 4º Derecha, 28001 Madrid, España
• Email: prof.monica.sanchez.roman@example.com

 

2. Personal Data Collected and Purpose of Processing We collect and process personal data for the following purposes:

• Contact Forms/Comments: If you use the contact form or leave comments on blog posts, we collect your name and email address to respond to your inquiries, manage your comments, and provide you with relevant information.
• Browse Data: Through cookies and similar technologies (see our Cookie Policy), we collect non-identifiable Browse data such as IP address, device type, browser type, and pages visited. This data is used to analyze website traffic, improve website functionality, and enhance user experience. This data is typically aggregated and anonymized.
• Newsletter Subscription (if applicable): If you subscribe to our newsletter, we collect your email address to send you updates, new blog posts, or relevant information.

 

3. Legal Basis for Processing The legal bases for processing your personal data are:

• Consent: For personal data collected through contact forms, comments, or newsletter subscriptions, the legal basis is your explicit consent, which you provide by submitting the form or subscribing. You have the right to withdraw your consent at any time.
• Legitimate Interest: For analyzing website usage (with anonymized data) and ensuring the security of our website, the legal basis is our legitimate interest in improving our services and protecting our online presence.

 

4. Data Retention Personal data will be retained for the time necessary to fulfill the purpose for which it was collected, or until you request its deletion.

• Contact/Comment Data: Kept as long as necessary to manage the inquiry or comment, and then for any legally required period for record-keeping.
• Newsletter Data: Kept until you unsubscribe from the newsletter.
• Browse Data: Anonymized data may be kept for statistical purposes indefinitely.

 

5. Data Recipients We do not share your personal data with third parties, except in the following cases:

• Legal Obligation: When required by law or a judicial order.
• Service Providers: We may use third-party service providers (e.g., web hosting, analytics services like Google Analytics) that may have access to certain data to perform their services. These providers are bound by confidentiality agreements and are only permitted to process data according to our instructions and applicable data protection laws.

 

6. International Data Transfers Some of our service providers (e.g., Google Analytics) may be located outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place to protect your data, such as standard contractual clauses approved by the European Commission or by relying on adequacy decisions. 7. Your Rights (GDPR Rights) Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

• Right of Access: To obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data.
• Right to Rectification: To obtain the rectification of inaccurate personal data concerning you.
• Right to Erasure («Right to be forgotten»): To obtain the erasure of personal data concerning you without undue delay under certain circumstances.
• Right to Restriction of Processing: To obtain restriction of processing under certain circumstances.
• Right to Data Portability: To receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.
• Right to Object: To object, on grounds relating to your particular situation, at any time to processing of personal data concerning you.
• Right to Withdraw Consent: To withdraw your consent at any time where processing is based on consent.
• Right to Lodge a Complaint: To lodge a complaint with a supervisory authority, particularly the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD), if you believe that the processing of your personal data infringes GDPR.

 

8. How to Exercise Your Rights To exercise your rights, please send an email to prof.monica.sanchez.roman@example.com, attaching a copy of a document that proves your identity (e.g., DNI/NIE or passport). 9. Security Measures We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.