Privacy Policy
Privacy policy.
Information on how your personal data is processed under the GDPR and the Spanish data protection act (LOPDGDD). Before filling in any form on this site, we recommend reading this document: what data we collect, what we use it for, and which rights you can exercise over it.
This is a translation provided for convenience. The Spanish version is the legally binding one; in the event of any discrepancy, the Spanish text prevails.
Data controller
- Identity: Daria Chabanova, sole trader (autónoma, self-employed), trading as ECHO Barcelona
- Tax ID (NIE): Y9915486Q
- Address: Passeig de Manuel Girona, 46, 08034 — Barcelona, Spain
- Email: clientes@echobarcelona.com
What do we process your data for?
At ECHO Barcelona we process the personal data you provide through our contact and newsletter sign-up forms in order to:
- Answer your enquiries and requests for information about our services.
- Manage the contractual relationship if you become a client.
- Send you commercial communications about our services, only where you have given us your express consent.
- Comply with the legal obligations that apply to us.
How long do we keep your data?
We keep your data for as long as the contractual relationship lasts or, where no contract is entered into, for as long as is necessary to deal with your request. After that, we keep it for the applicable statutory limitation periods.
What is the legal basis for processing?
- Performance of a contract: when you are a client of ECHO Barcelona.
- Consent: the consent you give us by completing our forms or subscribing to the newsletter.
- Legitimate interest: to respond to your enquiries and improve our services.
Who is your data shared with?
Your data is not passed on to third parties, except where required by law. It may be processed by service providers (web hosting, email delivery, management tools) acting as data processors, always under a contract in accordance with article 28 of the GDPR.
If you book a consultation from the contact page, the booking is handled by Calendly (Calendly LLC, USA), which processes your name, email and chosen time slot to arrange the meeting. Calendly may transfer data outside the European Economic Area under the safeguards provided by the GDPR, such as standard contractual clauses. More information in its privacy policy.
Your rights
You may exercise your rights of access, rectification, erasure, restriction, objection and portability at any time, as well as withdraw your consent where processing is based on it. To do so, write to us at clientes@echobarcelona.com stating which right you wish to exercise.
If you believe that the processing of your data does not comply with applicable law, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es).
Security
We apply the technical and organisational measures needed to guarantee the security and confidentiality of your personal data, preventing its alteration, loss or unauthorised access.