Privacy Policy
Last updated: October 2026
In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), the user is informed of the following Privacy Policy.
1. Data Controller
Controller: René Escobar
Tax ID (NIF): Y8224506L
Address: Calle Profesor Hernández Pacheco 13, Portal 6, 10002 Cáceres (Spain)
Email: info@reneescobar.es
Phone: +34 632 25 14 54
2. Principles Applied to Processing
The processing of personal data is carried out in accordance with the principles of lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability.
3. Data We Process
We only process the personal data that the user voluntarily provides through the contact form on the Website, by email or via WhatsApp messaging. This data consists of:
- Identification data: name.
- Contact data: email address and phone number.
- Professional data (optional): company or project name.
- Content of the enquiry: information that the user freely includes in the message.
4. Purposes of Processing and Legal Bases
4.1. Handling the enquiry or request for information
Purpose: to respond to enquiries received and to send the requested information or quotation.
Legal basis: consent of the data subject (Art. 6.1.a GDPR), granted by submitting the form.
4.2. Sending commercial communications and offers
Purpose: to send offers, promotions or information of interest about services, always related to the professional activity.
Legal basis: express consent of the data subject (Art. 6.1.a GDPR), granted by ticking the specific checkbox. The user may withdraw this consent at any time.
4.3. Managing the contractual relationship
Purpose: to manage the professional relationship arising from the contracting of services, including invoicing and tax obligations.
Legal basis: performance of a contract (Art. 6.1.b GDPR) and compliance with legal obligations (Art. 6.1.c GDPR).
4.4. Referral programme
Purpose: to manage the referral programme and pay the corresponding commissions.
Legal basis: performance of a contract (Art. 6.1.b GDPR) and compliance with tax obligations (Art. 6.1.c GDPR).
5. Data Retention
| Type of contact | Retention period |
|---|---|
| Enquiries without a contract | Permanent deletion immediately after the enquiry has been handled. |
| Sending of offers (without contract) | Minimal contact data retained only for as long as the data subject's express consent remains in force. Revocable at any time. |
| Signed contractual relationship | Throughout the entire commercial relationship and, subsequently, for the statutory limitation periods (6 years for tax and accounting obligations). |
| Referral programme | Until the end of the employment or commercial relationship and, subsequently, for the applicable statutory periods for tax and accounting reasons. |
6. Recipients of the Data
We do not share personal data with third parties. The data provided by the user is not transferred, sold, rented or disclosed to any other entity, except where legally required.
The WhatsApp platform (owned by Meta Platforms, Inc.) is used solely as a messaging channel for receiving enquiries. Its use implies acceptance of the terms and policies of that platform, with Meta acting as a data processor under the terms of its own policy.
7. International Transfers
No international data transfers to third countries are carried out, except those that may arise, where applicable, from the use of WhatsApp as indicated in the previous section.
8. Rights of the Data Subject
The user may exercise the following rights recognised by the GDPR:
- Access: to know what personal data we process.
- Rectification: to request the correction of inaccurate data.
- Erasure: to request the deletion of their data.
- Restriction: to request the restriction of processing.
- Portability: to receive their data in a structured format.
- Objection: to object to the processing of their data.
These rights may be exercised by sending a written request, accompanied by a copy of an identity document, to the email address info@reneescobar.es.
9. Complaint to the Supervisory Authority
If the user considers that their rights have not been properly addressed, they may file a complaint with the Spanish Data Protection Agency (AEPD), the competent supervisory authority in Spain:
In addition, the user may also contact the data protection supervisory authority of their country of residence (for example, the Information Commissioner's Office – ICO – in the United Kingdom, or the relevant authority in their jurisdiction).
10. Minors
The services offered on the Website are intended for persons over 18 years of age. No data from minors is knowingly collected. If a minor has provided personal data, their legal guardian may request its deletion by writing to info@reneescobar.es.
11. Security
The Controller has adopted the technical and organisational measures necessary to guarantee the security of personal data and to prevent its alteration, loss, processing or unauthorised access, in accordance with the state of the art and the nature of the data stored.
12. Updates to this Policy
The Controller reserves the right to modify this Privacy Policy in order to adapt it to legislative or jurisprudential developments, as well as to industry practices. In the event of substantial changes, the user will be informed through the Website.