Privacy policy

← Back to homepage

This policy expresses how the personal information of all people who interact with THE EDITORIALISTA, hereinafter, the COMPANY/BUSINESS through this website will be treated and protected. Please, you must read all the sections of the Legal Notice, the cookies policy, and this privacy policy before using this website.

In accordance with the provisions of EU Regulation 2016/679, of the European Parliament and of the Council of April 27, 2016 (GDPR) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, Irene van der Steen, hereinafter, the COMPANY/BUSINESS informs you that, by accepting this Privacy Policy, you give your express, informed, free, and unequivocal consent for the Data you provide, and to which the technical and organizational security measures provided for in current regulations are applied, to be processed by the COMPANY/BUSINESS, as the data controller.

WHO IS THE CONTROLLER OF THIS WEBSITE?

  • Identity of the Controller: Irene van der Steen
  • Trade name: THE EDITORIALISTA
  • Tax ID (NIF/CIF): Y0751719R
  • Address: Carrer Santa Maria, 63
  • Email: irene@theeditorialista.com

WHAT PERSONAL DATA IS COLLECTED ON THIS WEBSITE?

For the purposes established in this Privacy Policy, the COMPANY/BUSINESS collects and processes the Personal Data detailed below, which will depend on the different products or services you request on this Website:

  • Identifying data: name, surname.
  • Contact data: postal address, email, mobile phone number.
  • Navigation data: IP address, type and identification of the device, type of browser, domain through which you access the Website, navigation data, activity on the Website.

ON WHAT LEGAL BASIS ARE THESE DATA PROCESSED?

We process your personal data based on the following legal grounds:

  • The execution of a contract with the COMPANY/BUSINESS, for the contracting of services, publishing ads, and managing the requested services.
  • The user’s consent in relation to contact, subscription to content, and the sending of commercial communications, via email, cookies, or messaging systems.
  • The legitimate interest of the data controller to protect the users of the COMPANY/BUSINESS website from abuse and fraud in the use of our services.

FOR WHAT PURPOSES WILL WE PROCESS YOUR DATA?

On this website, there are different forms; in each of them, the information collected will be used as follows:

  • Content subscription forms: there are several forms to activate the subscription. The data provided will be used exclusively to send the Newsletter and keep you updated on news and specific offers, exclusive to subscribers of THIS WEBSITE.
  • Comment form: The personal data entered in the form to insert these comments will be used exclusively to moderate and publish them.
  • Contact form: There is also a contact form for queries, suggestions, or professional contact. In this case, the email address will be used to respond to them and send the information that the user requests through the website.

DATA RETENTION PERIOD

Customer Data: The retention period for personal data will vary depending on the service the Customer contracts. In any case, it will be the minimum necessary, and may be maintained for up to:

  • 4 years: Law on Infractions and Sanctions in the Social Order (obligations regarding affiliation, registrations, deregistrations, contributions, payment of salaries…); Arts. 66 et seq. General Tax Law (accounting books…).
  • 5 years: Art. 1964 of the Civil Code (personal actions without a special term).
  • 6 years: Art. 30 of the Commercial Code (accounting books, invoices…).
  • 10 years: Art. 25 of the Law on Prevention of Money Laundering and Financing of Terrorism.

Subscriber data: From the time the user subscribes until they unsubscribe.

Potential customer data: the data will be kept in any case during the term of the established commercial relationship and, once concluded, for two years, unless the user requests its deletion sooner.

WHAT ARE YOUR RIGHTS CONCERNING THE USE OF YOUR DATA?

Any person has the right to obtain confirmation as to whether or not we at the COMPANY/BUSINESS are processing personal data that concerns them.

Interested persons have the right to:

  • Request access to personal data related to the interested party.
  • Request its rectification or deletion.
  • Request its cancellation.
  • Request the limitation of its processing.
  • Object to the processing.
  • Request data portability.

If you have given your consent for any specific purpose, you have the right to withdraw the consent granted at any time, without this affecting the lawfulness of the processing based on the consent prior to its withdrawal.

In the event that you feel your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a claim with the competent Data Protection Control Authority through its website: https://www.aepd.es/es

To exercise these rights, you can write to irene@theeditorialista.com, hereinafter, our email indicated above.

There is a form for the exercise of your rights, you can request it by email or if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties.

These forms must be signed electronically or be accompanied by a photocopy of the ID (DNI).

If you are represented by someone, you must attach a copy of their ID, or it must be signed with their electronic signature.

The forms can be presented in person, sent by letter, or by email to the address of the controller that appears at the beginning of this text.

NOTIFICATION AND DECLARATION OF BREACHES

At the COMPANY/BUSINESS, we assume security measures appropriate to the level of risk to protect personal information against loss, misuse, and unauthorized access, disclosure, alteration, and destruction, taking into account the risks involved in processing and the nature of the personal information; however, if the COMPANY/BUSINESS determines that your service data has been misappropriated (even by an employee of the COMPANY/BUSINESS), has been exposed due to a security breach, or has been improperly acquired by a third party, the COMPANY/BUSINESS will immediately inform you of said security breach, misappropriation, or improper acquisition.

TO WHOM WILL YOUR DATA BE COMMUNICATED?

Many tools used on this website to manage data are contracted to third parties. To provide services strictly necessary for the development of the activity, the COMPANY/BUSINESS shares data with the following providers under their corresponding privacy terms:

External service providers (e.g., payment processing services, order processing, analytics, marketing campaign management, website management, and email distribution and other similar service providers) so that they can perform commercial functions on behalf of the COMPANY/BUSINESS.

The web development and maintenance company, or the hosting company, may have access to this website occasionally. They have a signed service provision contract that obliges them to maintain the same level of privacy that applies to the treatments carried out on this website.

Any international data transfer derived from the use of tools or service providers will adhere to the Privacy Shield agreement, which guarantees that American software companies comply with European data protection policies regarding privacy, secrecy, and data security.

SEGMENTATION AND PROFILING

The registration of personal data provided at the time of subscription, contact, interaction with the website, and any other data provided during navigation, including information supplied by cookies in relation to browsing habits, will be used in order to be segmented or categorized for the purpose of applying them to the activity related to (general administration management, information, marketing of advertising spaces, analysis of proposals requested by users/customers, statistical study of the services and contents used, tastes and preferences, and surveys or forms).

Profiling, through the analysis of your individual automated decisions, consists of the use of your Personal Data to evaluate certain personal aspects, such as the analysis and prediction of your economic situation, personal preferences, interests, behavior, location, movements, and attitudes. The logic applied for obtaining these profiles is the use of statistical procedures, and the consequences of this processing of your data through profiling are the sending of personalized communications of your interest with related content.

The legal basis for processing your data for the indicated purposes and the preparation of automated individual decisions by creating profiles is the consent granted when checking the previously indicated box.

DATA SECRECY AND SECURITY

THIS WEBSITE is committed to the use and processing of the user’s personal data, respecting its confidentiality, in accordance with the purpose thereof; as well as complying with its obligation to save them and adapt all measures to avoid alteration, loss, processing, or unauthorized access, in accordance with the provisions of current data protection regulations.

This website includes an SSL certificate. This is a security protocol that makes your data travel in an integral and secure way; that is, the transmission of data between a server and the web user, and in feedback, is totally encrypted.

THIS WEBSITE cannot guarantee the absolute impregnability of the Internet network, nor, therefore, the violation of data through fraudulent access to them by third parties.

Regarding the confidentiality of the processing, the COMPANY/BUSINESS will ensure that any person who is authorized by the COMPANY/BUSINESS to process the client’s data (including its staff, collaborators, and providers) will be under the appropriate obligation of confidentiality (whether a contractual or legal duty).

When any security incident occurs, upon becoming aware of it, the COMPANY/BUSINESS must notify the Client without undue delay and must provide timely information related to the Security Incident as it becomes known, or when the client reasonably requests it.

ACCURACY AND TRUTHFULNESS OF DATA

As a user, you are solely responsible for the truthfulness and correctness of the data you send to THIS WEBSITE, exonerating the COMPANY/BUSINESS of any liability in this regard. Users guarantee and respond, in any case, for the accuracy, validity, and authenticity of the personal data provided, and undertake to keep them duly updated. The user agrees to provide complete and correct information in the contact or subscription form.

REVOCABILITY

The consent granted, both for the processing and for the transfer of the data of the interested parties, is revocable at any time by communicating it to the COMPANY/BUSINESS in the terms established in this Policy for the exercise of ARCO rights. This revocation will in no case have retroactive character.

CHANGES TO THE PRIVACY POLICY

The COMPANY/BUSINESS reserves the right to modify this policy to adapt it to legislative or jurisprudential developments, as well as industry practices. In such cases, it will announce on this page the changes introduced with reasonable notice before their implementation.

The privacy policy was last updated on 05/04/26.