At totti.es, we are committed to protecting the privacy of our users. This Privacy Policy describes how we collect, use and protect the personal information you provide to us through this website, in compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).
1. Data Controller
Who is responsible for your data?
-
Identity (Company name or name of the self-employed person): Totti Konnola
-
Email: timokonn@gmail.com
2. Purpose of Processing
What do we use your personal data for?
At totti.es, we process the information provided by interested parties for the following purposes:
-
Contact Form: Respond to requests, queries, or enquiries made via the website form or by email.
-
Customer Management (if applicable): Administrative, accounting, and tax management of contracted services or purchased products.
-
Newsletter (if applicable): To send commercial communications, news or blog articles, provided that the user has given their explicit consent.
-
Comment Moderation: Manage and publish comments you leave on blog articles.
No automated decisions will be made based on this profile (we do not use algorithms to discriminate against you).
3. Legitimacy
Why is it lawful for us to process your data?
The legal basis for processing your data is:
-
Consent of the data subject: By filling in the forms (contact, subscription) and ticking the acceptance box, you give us explicit permission to process your data.
-
Execution of a contract: If you purchase a product or service on the website, processing is necessary for the management of the purchase.
-
Legitimate interest: To ensure the security of the website and perform basic statistical analysis (technical cookies).
-
Legal obligation: To comply with tax regulations (e.g. invoicing).
4. Data Retention
How long will we keep your data?
The personal data provided will be retained:
-
As long as the business relationship continues.
-
Until you request its deletion.
-
For the time necessary to comply with legal obligations (e.g. 4 years for tax matters).
5. Recipients
Who do we share your data with?
As a general rule, data will not be transferred to third parties, except where legally required. However, in order to provide services strictly necessary for the development of its activity, totti.es shares data with the following providers under their corresponding privacy conditions:
-
Hosting and Server: IONOS, based in the EU (or adhering to security agreements).
-
Google Analytics: Servicio analítico de web prestado por Google, que utiliza cookies para analizar el uso del sitio.
6. User Rights
What are your rights when you provide us with your data?
Any person has the right to obtain confirmation as to whether or not totti.es is processing personal data concerning them. Interested parties have the right to:
-
Access your personal data.
-
Request the rectification of inaccurate data.
-
Request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
-
Request the restriction of processing of your collected data.
-
Object to the processing.
-
Request data portability.
To exercise these rights, you may send an email to timokonn@gmail.com< 0 >attaching a copy of your ID card or equivalent document.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you consider that the processing does not comply with current regulations.
7. Data Security
totti.es undertakes to use and process users’ personal data, respecting their confidentiality and using them in accordance with their purpose, as well as to comply with its obligation to store them and take all measures to prevent their alteration, loss, unauthorised processing or access, in accordance with the provisions of current data protection regulations.
This website includes an SSL certificate. This is a security protocol that ensures your data is transmitted securely and in its entirety.
8. Accuracy and truthfulness of data
As a user, you are solely responsible for the accuracy and correctness of the data you submit to totti.es, exempting the Data Controller from any responsibility in this regard.
