Your privacy is important to me. In this privacy statement I explain what personal data I collect from my users and how I use it. I encourage you to read these terms carefully before providing your personal data on this website. Those over thirteen years of age may register on https://ireneparejo.com/ as users without the prior consent of their parents or guardians.

In the case of minors under thirteen years of age, the consent of parents or guardians is required for the processing of their personal data.

Under no circumstances will data relating to the professional or economic situation or the privacy of other family members be collected from minors without their consent.

If you are under thirteen years of age and have accessed this website without notifying your parents, you should not register as a user.

This website respects and takes care of the personal data of users. As a user, you should know that your rights are guaranteed.

I have worked hard to create a safe and trustworthy space, and that is why I want to share my principles regarding your privacy:

• I never ask for personal information unless it is really necessary to provide the services you require from me.
• I never share my users' personal information with anyone except to comply with the law or with your express permission.
• Nunca utilizo tus datos personales con una finalidad diferente a la expresada en esta política de privacidad.

Please note that this Privacy Policy may vary depending on legislative or self-regulatory requirements, so users are advised to visit it periodically. It will be applicable if users decide to fill out any form on any of the contact forms where personal data is collected.

Irene Parejo has adapted this website to the requirements of Organic Law 15/1999, of December 13, on the Protection of Personal Data (LOPD), and to Royal Decree 1720/2007, of December 21, known as the Regulation for the development of the LOPD. It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 regarding the protection of natural persons (RGPD), as well as with Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSICE or LSSI).

Responsible for the processing of your personal data

• Identity of the person responsible: Irene Parejo Ortiz
• Trade name: Irene Parejo
• NIF/CIF: 51134264C
• Address: Santa Mª Soledad Torres Acosta 1
• Email: hola@ireneparejo.com
• Activity: marketing online

For the purposes of the aforementioned General Data Protection Regulation, the personal data that you send me through the forms on the website will be treated as data of “Website Users and Subscribers”.

For the processing of my users' data, I implement all technical and organizational security measures established in current legislation.

When processing your personal data, I will apply the following principles that comply with the requirements of the new European data protection regulation:

• Principle of legality, loyalty and transparency: I will always require your consent to process your personal data for one or more specific purposes that I will inform you about in advance with absolute transparency.
• Data minimization principle: I will only request data that is strictly necessary in relation to the purposes for which I require it. The minimum possible.
• Principle of limitation of the conservation period: The data will be kept for no longer than necessary for the purposes of the processing, depending on the purpose. I will inform you of the corresponding retention period. In the case of subscriptions, I will periodically review my lists and delete those records that have been inactive for a considerable time.
• Principle of integrity and confidentiality: Your data will be treated in such a way as to ensure adequate security of personal data and guarantee confidentiality. You should be aware that I take all necessary precautions to prevent unauthorized access or misuse of my users' data by third parties.

How did I obtain your data?

The personal data that I process at Irene Parejo come from:

• Contact form
• Subscription form
• Blog Comments
• Service Request Form

What are your rights when you provide me with your data?

Any person has the right to obtain confirmation as to whether or not Irene Parejo is processing personal data that concerns him or her.

Interested persons have the right to:

• Request access to personal data relating to the interested party
• Request rectification or deletion
• Request the limitation of your treatment
• Oppose treatment
• Request data portability

Interested parties may access their personal data, as well as request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, interested parties may request the limitation of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, interested parties may request the

In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. Irene Parejo will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims. As an interested party, you have the right to receive the personal data that concerns you, that you have provided to me and in a structured format, of common use and mechanical reading, and to transmit them to another data controller when:

• The treatment is based on consent
• The data has been provided by the interested party.
• El tratamiento se efectúe por medios automatizados.

When exercising your right to data portability, you will have the right to have personal data transmitted directly from controller to controller where technically feasible.

Interested parties will also have the right to effective judicial protection and to lodge a complaint with the supervisory authority, in this case, the Spanish Data Protection Agency, if they consider that the processing of personal data concerning them infringes the Regulation.

For what purpose do I process your personal data?

When a user connects to this website, for example to comment on a post, send an email to the owner, subscribe or make a purchase, he or she is providing personal information for which Irene Parejo is responsible. This information may include personal data such as your IP address, name, physical address, email address, telephone number, and other information. By providing this information, the user consents to his or her information being collected, used, managed and stored by https://ireneparejo.com/, only as described in the Legal Notice and in this Privacy Policy.

At Irene Parejo there are different systems for capturing personal information and I process the information provided to me by interested parties for the following purpose for each capture system (forms):

• Contact form:I request the following personal data: Name, Email, to respond to the requirements of the users of https://ireneparejo.com/. For example, I can use this data to respond to your request and answer any questions, complaints, comments or concerns you may have regarding the information included on the website, the services provided through the website, the processing of your personal data, questions regarding the legal texts included on the website, as well as any other queries you may have that are not subject to the terms of the contract. I inform you that the data you provide us will be located on the servers of:

Cloudari (Irene Parejo's supplier) within the EU.

I inform you that the data you provide us will be located on the servers of:

• Content subscription form: In this case, I request the following personal data: Name, Email, to manage the subscription list, send newsletters, promotions and special offers, provided by the user when subscribing. Within the website there are several forms to activate the subscription. The electronic newsletters or newsletters are managed by Mailchimp. Mailchimp (Irene Parejo's provider) outside the EU in the USA. Mailchimp is covered by the EU-US Privacy Shield agreement, whose information is available aqui, aprobado por el Comité Europeo de Protección de Datos.
• Blog comment registration form: To comment on the posts on the blog https://ireneparejo.com/ the user is required to register using this form. In this case, I request the following personal data: Name, Email, Once registered, the user will be able to make as many comments as they wish and respond to previous ones. I inform you that the data you provide us will be located on the servers of:

Cloudari (Irene Parejo's supplier) within the EU.

• Service Request Form: I request the following personal data: Name, Email, to request any of the services that https://ireneparejo.com/ makes available to its users. The information collected will allow you to request the corresponding service for possible processing of the same offline. Requests will be answered by email. The website does not allow direct payment management. I inform you that the data you provide us will be located on the servers of:

Cloudari (Irene Parejo's supplier) within the EU.

There are other purposes for which I process your personal data:

• To ensure compliance with the Terms of Use and applicable law. This may include developing tools and algorithms that help this website to ensure the confidentiality of the personal data it collects.
• To support and improve the services offered by this website.
• Other non-identifying data is also collected through some cookies that are downloaded to the user's computer when browsing this website, which I detail in the cookie policy.
• To manage social networks. Irene Parejo may have a presence on social networks. The processing of data carried out on people who become followers on the social networks of the official pages of https://ireneparejo.com/ will be governed by this section. As well as by those conditions of use, privacy policies and access regulations that belong to the social network that applies in each case and previously accepted by the user of Irene Parejo. Irene Parejo will process your data for the purposes of correctly managing your presence on the social network, reporting on Irene Parejo's activities, products or services. As well as for any other purpose that the regulations of social networks allow. Under no circumstances will I use the profiles of followers on social networks to send advertising on an individual basis.

In accordance with the provisions of the European General Data Protection Regulation (GDPR) 2016/679, Irene Parejo (ireneparejo.com) with registered office at c/ Portalegre 15 2E 28019 Madrid (MADRID) will be responsible for the processing of data corresponding to website users and subscribers.

Irene Parejo does not sell, rent or transfer personal data that may identify the user, nor will it do so in the future, to third parties without prior consent. However, in some cases collaborations with other professionals may be carried out. In these cases, consent will be required from users informing them of the identity of the collaborator and the purpose of the collaboration. This will always be done with the strictest security standards.

Remarketing

The remarketing feature allows me to reach people who have previously visited https://ireneparejo.com/ and associate a specific audience with a specific message. Remarketing is a method of getting users who have visited my site to come back.

As a user of https://ireneparejo.com/ I inform you that we are collecting information for this remarketing function at https://ireneparejo.com/.

The information I collect through this feature is collected by Facebook and Google Adword cookies. You can find out what data these cookies collect in the following privacy policies for each service:

• Facebook
• Google Adword

If you do not want your information to be collected by these cookies, you can opt out of Google's use of cookies through Google's Ads Settings. You can also opt out of a third-party vendor's use of cookies through the Network Advertising Initiative opt-out page.

This type of service allows users to interact with social networks or other external platforms directly from the pages of this website. The interactions and information obtained by this website will always be subject to the user's privacy settings on each social network. If a service is installed that allows interaction with social networks, it is possible that, even if users do not use the service, it may collect web traffic data related to the pages on which they are installed.

Facebook ads

On https://ireneparejo.com/ I use Facebook ads, the Facebook advertising platform, which allows me to create campaigns and advertisements. When creating an ad, the audience can be segmented by:

• Place
• Demographic data (age, gender, etc.)
• Interests (activities, hobbies, etc.)
• What they buy online and through other channels

Data obtained through Facebook ads are subject to this privacy policy from the moment the user leaves their data in the form on this website to join the subscription newsletter. Under no circumstances will the information from Facebook be used for a different purpose.

Google Adwords

Adwords is a Google platform for ADVERTISERS who want to advertise on GOOGLE. At https://ireneparejo.com/ I use Google Adwords, the Google advertising platform, which allows me to create campaigns and ads to display on other websites. When creating an ad, the audience can be segmented by:

• Place
• Demographic data (age, gender, etc.)
• Interests (activities, hobbies, etc.)
• What they buy online and through other channels

Data obtained through Google Adwords are subject to this privacy policy from the moment the user leaves their data in the form on this website to join the subscription newsletter. Under no circumstances will the information from Google be used for any other purpose.

Letimation for the processing of your data

The legal basis for the processing of your data is: consent.

To contact or make comments on this website, consent to this privacy policy is required.

The prospective or commercial offer of products and services is based on the consent requested from you, without the withdrawal of this consent in any case conditioning the execution of the subscription contract.

Data Category

The categories of data processed are identifying data.

No specially protected categories of data are processed.

¿Por cuánto tiempo conservaré tus datos?

The personal data provided will be kept:

• As long as the business relationship is maintained.
• Until its deletion is requested by the interested party.
• Period from last confirmation of interest: 5 years.

To which recipients will your data be communicated?

Many of the tools I use to manage your data are contracted by third parties.

In order to provide services strictly necessary for the development of the activity, https://ireneparejo.com/ shares data with the following providers under their corresponding privacy conditions:

Google Analytics: Google Analytics uses “cookies”, which are text files placed on your computer, to help https://ireneparejo.com/ analyse how users use the website. The information generated by the cookie about your use of https://ireneparejo.com/ (including your IP address) will be transmitted to and stored by Google on servers in the United States.

Hosting: Cloud Asesoría,Recursos e Innovación,S.L. with registered office in Spain. More information at: https://cloudari.com/ (Cloud Asesoría,Recursos e Innovación,S.L.). Cloud Asesoría,Recursos e Innovación,S.L. processes the data for the purpose of providing its hosting services to Irene Parejo.

Web platform: Automattic Inc., domiciled in the USA. More information at: https://es.wordpress.com/ (Automattic Inc.). Automattic Inc. processes the data for the purpose of providing its web platform services to Irene Parejo.

Email marketing: The Rocket Science Group LLC d/b/a , domiciled in the USA. More information at: https://mailchimp.com/ (The Rocket Science Group LLC d/b/a ). The Rocket Science Group LLC d/b/a processes the data for the purpose of providing its email marketing services to Irene Parejo.

Navigation

When browsing https://ireneparejo.com/ non-identifiable data may be collected, which may include IP addresses, geographic location (approximately), a record of how the services and sites are used, and other data that cannot be used to identify the user. Non-identifiable data also includes data related to your browsing habits through third-party services. This website uses the following third-party analysis services:

• Google analytics
• Facebook inside
• Facebook Pixel

I use this information to analyze trends, administer the site, track user's movements around the site, and to gather demographic information about my user base as a whole.

Confidentiality and data security

https://ireneparejo.com/ is committed to the use and processing of users' personal data, respecting their confidentiality and using them in accordance with their purpose, as well as to complying with its obligation to store them and adapt all measures to prevent unauthorized alteration, loss, processing or access, in accordance with the provisions of current data protection regulations.

This website includes an SSL certificate. This is a security protocol that ensures that your data travels in an integral and secure manner, that is, the transmission of data between a server and a web user, and in feedback, is fully encrypted.

https://ireneparejo.com/ cannot guarantee the absolute invulnerability of the Internet and therefore the violation of data through fraudulent access to them by third parties.

With regard to the confidentiality of processing, Irene Parejo will ensure that any person who is authorized by Irene Parejo to process the client's data (including its staff, collaborators and providers), will be under the appropriate obligation of confidentiality (whether a contractual or legal duty).

When a security incident occurs, upon becoming aware of it, Irene Parejo must notify the Client without undue delay and must provide timely information related to the Security Incident as it becomes known or when the Client reasonably requests it.

Accuracy and veracity of data

As a user, you are solely responsible for the veracity and accuracy of the data you send to https://ireneparejo.com/, exonerating Irene Parejo (ireneparejo.com) from any liability in this regard.

Users guarantee and are responsible, in any case, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep them duly updated. The user agrees to provide complete and correct information in the contact or subscription form.

Acceptance and consent

The user declares to have been informed of the conditions regarding the protection of personal data, accepting and consenting to the processing of the same by Irene Parejo (ireneparejo.com) in the manner and for the purposes indicated in this privacy policy.

Revocability

The consent given, both for the processing and for the transfer of the data of the interested parties, is revocable at any time by communicating it to Irene Parejo (ireneparejo.com) in the terms established in this Policy for the exercise of ARCO rights. This revocation will in no case be retroactive.

Changes in the privacy policy

Irene Parejo reserves the right to modify this policy to adapt it to new legislation or jurisprudence, as well as to industry practices. In such cases, Irene Parejo will announce the changes on this page with reasonable notice prior to their implementation.

Commercial emails

In accordance with the LSSICE, https://ireneparejo.com/ does not carry out SPAM practices, and therefore does not send commercial emails that have not been previously requested or authorized by the user. Consequently, in each of the forms on the website, the user has the possibility of giving their express consent to receive the newsletter, regardless of the commercial information specifically requested.

In accordance with the provisions of Law 34/2002 on Information Society Services and Electronic Commerce, https://ireneparejo.com/ undertakes not to send commercial communications without properly identifying them.

Document reviewed in Madrid on 04-07-2022.