Privacy and Data Protection Policy – Karla Gutiérrez Pineda

Respecting current legislation, Karla Gutiérrez Pineda (hereinafter, the Website) is committed to adopting the technical and organizational measures necessary to guarantee the security of the personal data collected, according to the associated level of risk.

Laws incorporated into this privacy policy

This policy is adapted to current Spanish and European regulations regarding the protection of personal data on the internet, respecting the following rules:

Regulation (EU) 2016/679 (GDPR) of the European Parliament and of the Council of April 27, 2016.
Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).
Royal Decree 1720/2007, of December 21, which approves the Regulations for the development of Organic Law 15/1999 (RDLOPD).
Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce (LSSI-CE).

Identity of the controller of personal data

The controller of the personal data collected on this Website is:

Company name: Karla Gutiérrez Pineda
Tax ID: Z1169085T
Representative: Karla Gutiérrez Pineda (Sole Administrator)
Address: Calle del Maestro Alonso 13, 28028 Madrid, Spain
Telephone: +34 603 67 42 66
Email: karlagut96@gmail.com
Web: https://karlagutierrez.design/

Registration of personal data

The personal data collected through forms on the Website will be incorporated into our file in order to facilitate, expedite and fulfill the commitments established with the User, or to respond to requests or queries.
A record of processing activities is maintained as provided in the GDPR.

Principles applicable to the processing of personal data

Lawfulness, fairness and transparency: processing requires prior and informed consent from the User.
Purpose limitation: data is collected for specific, explicit and legitimate purposes.
Data minimization: only strictly necessary data is collected.
Accuracy: data must be accurate and up to date.
Storage limitation: data is kept only for the time necessary.
Integrity and confidentiality: data is treated securely and confidentially.
Proactive responsibility: the Controller ensures compliance with the above principles.

Categories of personal data

Only User identification data is processed. Special categories are not processed according to article 9 of the GDPR.

Legal basis for the processing of personal data

The legal basis is the User’s consent. This can be withdrawn at any time without affecting the use of the Website.
When data is requested in forms, it will be indicated whether its completion is mandatory.

Purposes of the processing

The data is used to: facilitate and fulfill commitments with the User, maintain the relationship, respond to requests, and for commercial, statistical and marketing purposes related to the Website.

Retention periods

The data is kept only for the time necessary for the purposes of the processing, or until the User requests its deletion.

Data recipients

The data may be shared with:

Google Analytics, Google Search Console and Google Tag Manager.
Hosting: Webempresa Europa S.L., C/ Almagro 11 6º 7ª 1, 28010 Madrid.
Web platform: Automattic Inc., https://es.wordpress.com/.

Personal data of minors

Only those over 14 years of age can grant consent. For minors under 14 years of age, authorization from parents or guardians is required.

Secrecy and security of data

Karla Gutiérrez Pineda adopts technical and organizational measures to guarantee the security and confidentiality of the data, including an SSL certificate.
In the event of a security breach that implies a high risk, the User will be notified without delay.

User rights

Access: Confirm whether data is being processed and obtain information about it.
Rectification: Modify inaccurate or incomplete data.
Suppression (“right to be forgotten”): Request deletion of data when it is no longer necessary or consent is withdrawn.
Restriction of processing: Limit the processing in certain cases.
Portability: Receive data in a structured format and transmit it to another controller.
Opposition: Oppose the processing of data.
Not to be subject to automated decisions: Including profiling.

To exercise rights, the User can send a written communication to the Data controller indicating name, ID, request, address for notifications, date and signature, and any supporting document, to:
Address: Calle del Maestro Alonso 13, 28028 Madrid, Spain
Email: karlagut96@gmail.com

Links to third-party sites

The Website may include links to third-party pages, which will have their own privacy policies.

Claims before the supervisory authority

The User can file claims with the Spanish Data Protection Agency:
https://www.aepd.es/.

II. Acceptance and changes to this Privacy Policy

The use of the Website implies acceptance of this Privacy Policy.
Karla Gutiérrez Pineda reserves the right to modify it according to legislative or jurisprudential changes.
It is recommended to periodically consult this page.Updated to adapt to the GDPR and the LOPD-GDD on 10/14/2025.