Privacy Policy
Data Controller
Aymara Cepero-Vargas (“Mar de Vargas”), contact details above, is the controller of the personal data collected on this site.
Data Collected and Purposes
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email (contact form) | Responding to your inquiry | Legitimate interest |
| Name, email (free guide / newsletter) | Sending the requested content and further communications | Consent |
| Payment data (via Stripe) | Processing your purchase | Contract performance |
| Booking data (via TidyCal) | Organizing your session | Contract performance |
Data Recipients
Your data may be shared with our technical service providers: HighLevel, Inc. (site and form hosting), Stripe (payments), TidyCal (scheduling). These providers are located in the United States; transfers are governed by Standard Contractual Clauses approved by the European Commission.
Retention Period
Data is kept for as long as necessary for the purposes above, and for a maximum of 3 years after the last contact, unless a longer legal retention period applies (accounting records).
Your Rights
Under GDPR, you have the right to access, rectify, erase, object to, and port your data. To exercise these rights, contact: [email protected]. You also have the right to lodge a complaint with the CNIL (cnil.fr) or with your local data protection authority.
Security
Reasonable technical and organizational measures are in place to protect your data from unauthorized access.