Privacy policy
At Naranjososa S.L. we treat the personal data you provide with care, in accordance with the General Data Protection Regulation (EU 2016/679, GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD). This English version is provided for convenience; the Spanish text prevails in case of discrepancy.
1. Data controller
- Controller: Naranjososa S.L.
- Tax ID (CIF): PENDING — to complete before publishing
- Address: PENDING — Madrid, full address
- Email: jorge@naranjososa.es
2. Data we collect
Through the contact form on the site we collect the following data: your name, email address and the message content you send us. The server also records the sender's IP address and the timestamp of submission for security and abuse prevention.
3. Purpose
The data is used solely to respond to your enquiry and, where applicable, to continue the conversation. It is not used for profiling or advertising, nor is it shared with third parties for commercial purposes.
4. Legal basis
Processing is based on the consent you give by submitting the form (art. 6(1)(a) GDPR) and on the legitimate interest of Naranjososa S.L. in replying to communications addressed to its contact inbox (art. 6(1)(f) GDPR).
5. Retention period
We keep the data for a maximum of 12 months from the last contact, unless a different legal retention obligation applies or the exchange gives rise to a contract, in which case data will be retained for the duration of the contract and the subsequent legal periods.
6. Recipients and processors
To operate the site and handle the contact form we use the following providers as data processors under contract:
- Resend, Inc. (United States) — transactional email provider. Your data is transferred to the US under the European Commission's Standard Contractual Clauses and, where applicable, under the EU–US Data Privacy Framework.
- Vercel Inc. (United States) — website hosting. Same safeguards as above apply.
We do not share data with any other third party, except where required by law.
7. Your rights
You may exercise the following rights at any time, free of charge, by writing to jorge@naranjososa.es with the subject "GDPR rights":
- Access to your data.
- Rectification of inaccurate data.
- Erasure ("right to be forgotten") when no longer necessary.
- Restriction of processing in the cases foreseen by the GDPR.
- Portability of data in a structured format.
- Objection to processing for reasons related to your particular situation.
- Withdrawal of consent, without retroactive effect.
8. Complaints
If you consider that the processing of your data does not comply with the regulations, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es), the competent supervisory authority.