Privacy Policy

1. Data controller

In compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), we inform you that the data controller for your personal data is:

• Company name: Aïda Díaz Giménez
• Tax ID: 77632530D
• Registered address: Plaza Maruja Mallo, Pontevedra, Spain
• Contact email: legal@craftingbits.es
• Website: https://www.craftingbits.com

2. Data we collect

Through the contact form on the Website, we collect the following personal data:

• Full name
• Email address
• Message and content of your inquiry

We do not collect specially protected data or data from minors under 14 years of age.

3. Purpose of processing

The personal data you provide through the contact form will be processed for the following purposes:

• To attend to and respond to your inquiry or information request.
• To manage the pre-contractual or contractual relationship with you if you wish to hire our services.
• To comply with applicable legal obligations.

We will not use your data to send you commercial communications without your express consent.

4. Legal basis for processing

The legal basis for processing your data is:

• Data subject's consent (Art. 6.1.a GDPR): by checking the acceptance box of this policy before submitting the form.
• Legitimate interest / pre-contractual relationship (Art. 6.1.b GDPR): to manage your commercial inquiry.

5. Retention period

We will retain your data for the time necessary to attend to your inquiry and, where applicable, manage the contractual relationship. After this period, the data will be blocked and subsequently deleted in accordance with applicable regulations.

As a general rule, contact data will be retained for a maximum of 2 years from the last contact.

6. Data recipients

We do not transfer your personal data to third parties, except as required by law. Data is processed by our email server for message delivery, with no external storage on third-party platforms for contact form management.

We do not carry out international data transfers outside the European Economic Area.

7. Your rights

You can exercise the following rights recognized by the GDPR at any time:

• Access: obtain confirmation of whether we process your data and access it.
• Rectification: correct inaccurate or incomplete data.
• Erasure ("right to be forgotten"): request the deletion of your data when it is no longer necessary.
• Objection: object to the processing of your data in certain circumstances.
• Restriction: request the temporary suspension of processing.
• Portability: receive your data in a structured, machine-readable format.
• Withdrawal of consent: at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, you can write to us at legal@craftingbits.es, indicating "Data Protection" in the subject line and attaching a copy of your ID or other identifying document.

If you consider that the processing of your data is not appropriate, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

8. Security

We apply the necessary technical and organizational measures to ensure the security of your data and prevent its loss, alteration, processing, or unauthorized access, taking into account the state of technology, the nature of the data stored, and the risks to which they are exposed.

9. Changes to the privacy policy

We may update this privacy policy periodically. We recommend reviewing it regularly. The date of the last modification appears at the top of this document.