WEBSITE PRIVACY POLICY
https://rafiah.es/

I. PRIVACY AND DATA PROTECTION POLICY

In compliance with current legislation, Rafiah.es (hereinafter also referred to as the “Website”) undertakes to adopt the necessary technical and organizational measures appropriate to the level of security corresponding to the risk of the data collected.

Laws incorporated into this Privacy Policy

This Privacy Policy is adapted to current Spanish and European regulations regarding personal data protection on the internet. Specifically, it complies with the following regulations:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
  • Organic Law 3/2018 of 5 December on Personal Data Protection and guarantee of digital rights (LOPD-GDD).
  • Royal Decree 1720/2007 of 21 December approving the regulations implementing Organic Law 15/1999 on Personal Data Protection (RDLOPD).
  • Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the Data Controller

The data controller of the personal data collected on Rafiah.es is:

Rafaella Garcia Iannuzzelli
NIF: Z0895200E
(hereinafter, the “Data Controller”)

Contact details:

Address: Calle Sagunto 195
Telephone: 658616456
Email: rafaella.garcia.iannuzzelli@gmail.com

Personal Data Registry

In compliance with the provisions of the GDPR and LOPD-GDD, we inform you that the personal data collected by Rafiah.es through the forms available on its pages will be incorporated into and processed in our files in order to facilitate, expedite, and fulfill the commitments established between Rafiah.es and the User, or to maintain the relationship established in the forms completed by the User, or to respond to a request or inquiry.

Likewise, in accordance with the GDPR and LOPD-GDD, unless the exception provided for in Article 30.5 of the GDPR applies, a record of processing activities is maintained specifying, according to their purposes, the processing activities carried out and other circumstances established in the GDPR.

Principles applicable to the processing of personal data

The processing of the User’s personal data shall be subject to the following principles:

  • Principle of lawfulness, fairness, and transparency
  • Principle of purpose limitation
  • Principle of data minimization
  • Principle of accuracy
  • Principle of storage limitation
  • Principle of integrity and confidentiality
  • Principle of accountability

Categories of personal data

The categories of data processed by Rafiah.es are solely identifying data. Under no circumstances are special categories of personal data processed within the meaning of Article 9 of the GDPR.

Legal basis for processing personal data

The legal basis for processing personal data is consent.

Rafiah.es undertakes to obtain the User’s express and verifiable consent for the processing of their personal data for one or more specific purposes.

The User has the right to withdraw consent at any time. Withdrawal of consent will not affect the use of the Website.

Purposes of processing personal data

Personal data is collected and managed for the purpose of:

  • Facilitating, expediting, and fulfilling commitments between the Website and the User
  • Maintaining relationships established through forms
  • Responding to requests or inquiries

Additionally, data may be used for commercial purposes such as personalization, operational and statistical purposes, and marketing studies to adapt content and improve service quality, operation, and navigation.

Data retention periods

Personal data will only be retained for the minimum time necessary for the purposes of its processing and, in any case, until the User requests its deletion.

Recipients of personal data

Personal data of the User may be shared with recipients or categories of recipients when necessary. The User will be informed at the time of data collection.

Personal data of minors

Only individuals over 14 years of age may lawfully consent to the processing of their personal data. For minors under 14, consent from parents or legal guardians is required.

Confidentiality and security of personal data

Rafiah.es undertakes to adopt the necessary technical and organizational measures to ensure the security of personal data and prevent its destruction, loss, alteration, or unauthorized access.

However, due to the nature of the internet, absolute security cannot be guaranteed.

In the event of a data breach likely to pose a high risk to individuals’ rights and freedoms, the User will be notified without undue delay.

User rights

The User has the following rights:

  • Right of access
  • Right to rectification
  • Right to erasure (“right to be forgotten”)
  • Right to restriction of processing
  • Right to data portability
  • Right to object
  • Right not to be subject to automated decision-making

To exercise these rights, the User must send a written request including:

  • Full name and ID copy
  • Details of the request
  • Address for notifications
  • Date and signature
  • Supporting documents

Requests may be sent to:

Address: Calle Sagunto 195
Email: rafaella.garcia.iannuzzelli@gmail.com

Links to third-party websites

The Website may include links to third-party websites. Rafiah.es is not responsible for their privacy practices.

Complaints to the supervisory authority

If the User believes that there is a violation of applicable regulations, they may file a complaint with the Spanish Data Protection Agency: https://www.aepd.es/


II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

The use of the Website implies acceptance of this Privacy Policy.

Rafiah.es reserves the right to modify this Privacy Policy at any time due to legal or regulatory changes.

Users are advised to review this page periodically.

This Privacy Policy has been updated in accordance with GDPR and Organic Law 3/2018.