Privacy Policy
Last updated: April 2026
1. Data Controller
The data controller responsible for your personal data is Daniela La Rosa, operating under UX Studio, with registered address in Palma de Mallorca, Spain. You can contact us at [email protected].
2. Legal Framework
This privacy policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Spanish Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).
3. Data We Collect
We collect the following personal data:
- Contact form data: name, email address, subject, and message content when you voluntarily submit our contact form.
- Technical data: IP address, browser type, device information, and pages visited through cookies and analytics tools.
- Communication data: any information you provide when contacting us via email or social media.
4. Purpose and Legal Basis
We process your personal data for the following purposes:
- To respond to inquiries (Art. 6(1)(b) GDPR) - processing is necessary for pre-contractual measures.
- To improve our website (Art. 6(1)(f) GDPR) - legitimate interest in analyzing website usage.
- To comply with legal obligations (Art. 6(1)(c) GDPR) - where required by Spanish or EU law.
5. Data Retention
Contact form submissions are retained for a maximum of 2 years from the date of submission, unless a longer retention period is required by law or for the establishment, exercise, or defense of legal claims. Analytics data is retained for 14 months.
6. Data Sharing
We do not sell your personal data. Data may be shared with the following categories of recipients:
- Hosting providers: for website infrastructure (servers located in the EU).
- Email service providers: for processing contact form submissions.
- Analytics providers: Google Analytics, with anonymized IP addresses.
International data transfers, where applicable, are protected by Standard Contractual Clauses (SCCs) approved by the European Commission.
7. Your Rights (GDPR Articles 15-22)
Under the GDPR and LOPDGDD, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time
To exercise these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
8. Cookies
This website uses cookies. Essential cookies are necessary for the website to function. Analytics cookies (Google Analytics) are only activated with your consent. You can manage your cookie preferences at any time through the cookie consent banner or your browser settings. For more details, see our cookie consent preferences.
9. Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, in accordance with Article 32 of the GDPR.
10. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.