Privacy policy
To complete before publishing: the details in square brackets (tax ID and professional address).
Last updated: 20 October 2026. The Spanish version prevails in case of discrepancy.
This policy explains how personal data you provide on this website are processed, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Controller
Maite Baviera Rodrigo · Tax ID [NIF] · [address], Valencia (Spain) · mbaviera@gmail.com. No data protection officer has been appointed, as it is not mandatory for this activity.
2. What data, for what purpose and on what legal basis
| Form or channel | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact | Name, email, organisation, reason and message | Reply to your enquiry and, if requested, prepare a proposal | Pre-contractual steps at your request (art. 6.1.b GDPR) or legitimate interest in handling professional enquiries (art. 6.1.f) |
| Audit needs assessment | Organisation details (profile, size, sites, sector, standards, situation and needs), professional contact details and comments | Study your request, recommend a service and send an audit or certification proposal | Pre-contractual steps at your request (art. 6.1.b GDPR) |
| SINCRO Assessment | Name, email, organisation, score and answers | Send you the report on your result | Pre-contractual steps at your request (art. 6.1.b GDPR) |
| Newsletter | Send the newsletter and information about services | Your consent (art. 6.1.a GDPR and art. 21 LSSI-CE), which you may withdraw at any time |
Online assessments produce an indicative recommendation. No automated decisions with legal or similarly significant effects are taken (art. 22 GDPR): a person always reviews the proposal.
3. Retention
- Enquiries and proposal requests without a contract: up to 12 months from the last contact.
- Clients: for the duration of the relationship and then for the statutory periods (six years for commercial records, four for tax).
- Newsletter: until you unsubscribe.
4. Recipients and processors
Data are not disclosed to third parties unless required by law. The following providers access them only to provide their service, under a data processing agreement: Netlify, Inc. (USA; hosting and forms), Google (Gmail; mailbox where form notifications and correspondence are received) and the newsletter tool [name], when activated.
5. International transfers
Netlify and Google may process data in the United States, under the EU-US Data Privacy Framework where the provider is certified, or under the Standard Contractual Clauses approved by the European Commission (art. 46 GDPR).
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent at any time, by writing to mbaviera@gmail.com. We will reply within one month. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Minors
This site is aimed at professionals. We do not knowingly collect data from children under 14.
8. Security
Encrypted connection (HTTPS), spam filters on forms, restricted access, and fonts hosted on this server so that your IP address is not sent to third parties while browsing.
9. Changes
Any change will be published here with the update date.