This Privacy Policy is a Declaration where I inform you about how I treat your personal data in https://tiovivobar.com/.

In https://tiovivobar.com/ You will have control over your personal information, and I will never take unlawful or unfair advantage of your personal data.

This Privacy Policy has been prepared in accordance with the principles and standards approved by Regulation (EU) 2016/679 of April 27, known as the General Data Protection Regulation or "GDPR."

1-. IDENTITY OF THE CONTROLLER

Name of the owner/responsible party: Carlos Castro, which will henceforth be called “https://tiovivobar.com/,” or the “owner”.

NIF/CIF: B72761828

Home: TORO STREET, 13 – 17 FLOOR 3 H

E-mail: hello@tiovivobar.com

2-. PURPOSES OF THE TREATMENT

At https://tiovivobar.com/ I process the personal data obtained as a result of using this website for the following purposes:

User contact management and customer service.

Management of the contractual relationship with the client.

Management of legal billing and tax obligations.

Analysis of user behavior on the website for the purpose of improving the usability of the service or our advertising campaigns, using cookies.

3-. LEGITIMATION OR LEGAL BASIS

This section addresses this question: What current regulations authorize us to process your personal data?

3.1. Legitimate interests of the controller (6.1 letter f of the GDPR)

I will use this legal basis to process the personal data you use to contact me through the features offered on this website (especially via email), to the extent that doing so does not pose an undue risk or harm to your rights and interests.

Extract from the judgment on the weighing of legitimate interest: This processing is necessary to achieve the objectives of the Controller, specifically, to be able to communicate electronically with its clients, prospects, and other contacts. Likewise, users are interested in being able to contact me by these means, and it is within their reasonable expectations that this processing of contact data will be carried out. Furthermore, Article 19 of the LOPDGDD (Spanish Data Protection Act) presumes that the processing of contact data, including those of sole proprietors and independent professionals, is covered by legitimate interest (Article 6.1 letter f of the GDPR). Regarding the personal data of the user who posts a comment on our blog, said user has a reasonable expectation that their comment will be published with the identifying data they provide to https://tiovivobar.com/.

3.2. Consent of the interested party (6.1 letter a of the GDPR)

I will request your express, prior, free, informed, and unequivocal consent for the use of analytical and advertising cookies. You can consult our Cookie Policy.

Likewise, I will expressly request your consent before sending you commercial communications electronically (e.g., via newsletter or email bulletins).

3.3. Execution of a contract or pre-contractual relationship (6.1 letter b of the GDPR).

When you place an order on our website for any of my services, I collect certain personal data that is strictly necessary to execute the contractual relationship with you.

3.4. Compliance with a legal obligation (6.1 letter c of the GDPR)

I will use the data provided by the user when placing an order or contracting a service. https://tiovivobar.com/ to comply with my legal billing and tax obligations.

4-. DATA CATEGORIES:

I collect the minimum amount of personal data possible in order to provide the service or purchase the corresponding product that you have requested from https://tiovivobar.com/.

This data is collected through the data collection forms on this website (course order or contact form) and through cookies and similar technologies.

None of the data processed by the Controller on this website are of a special category.

When collecting personal data through this website, I will inform you which ones are mandatory in order to provide the corresponding services (usually by marking them with an asterisk or "mandatory").

To ensure that the information contained in our processing system is always up-to-date and error-free, I ask that you inform me as soon as possible of any modifications or corrections to your personal data.

5-. CATEGORIES OF RECIPIENTS

I will not share the data collected through the features provided on this website with any other company or organization.

Only when required by European Union or Spanish law may I disclose your data to the appropriate public authorities, the competent authorities, and, where appropriate, to judges and courts.

When your personal data is going to be processed on behalf of https://tiovivobar.com/, I will only choose providers (data processors) who offer sufficient guarantees to implement appropriate technical and organizational measures and who safeguard the rights of data subjects. You can write to me at any time (contact details in Section 1 of this Policy) so that I can inform you about the data processors who, when using the features of this website, may have access to your personal data on behalf of https://tiovivobar.com/.

6-. INTERNATIONAL DATA TRANSFERS

That is: in what cases could your personal data be transferred to a third country outside the European Economic Area?

In principle https://tiovivobar.com/ does not contemplate this possibility except for the following exception:

6.1. Some cookies used by this website (as specified in the Cookie Policy) may transfer certain data, such as your IP or certain browsing parameters or settings of your device or terminal, to Google or Facebook, companies based in the United States of America.

Note: Given the annulment of the Privacy Shield by a court ruling of the European Court of Justice of July 16, 2020, based on an adequacy decision by the European Commission of July 12, 2016, which legitimized transfers to the United States, the Controller is studying the impact of this ruling on its organization. In any case, for the use of these cookies, the Controller requests the user's prior informed consent.

7-. DATA RETENTION

I will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, as well as for the duration of any legal action that may arise from your relationship with https://tiovivobar.com/.

Likewise, I will keep your data as long as you do not withdraw your consent (in the event that this is the legitimacy of the treatment), or as long as you do not request the deletion of said data, or the limitation or opposition to the treatment by https://tiovivobar.com/.

8-. RIGHTS

8.1. Rights of the data subject or owner of personal data:

8.1.1. Right of access: you have the right to obtain from https://tiovivobar.com/ confirmation of whether or not personal data concerning you are being processed. Tiovivobar.com/, where appropriate, will provide you with a copy of the personal data being processed.

8.1.2. Right of rectification: You have the right to obtain, without undue delay, the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary declaration.

8.1.3. Right to erasure: You have the right to obtain the erasure of personal data concerning you without undue delay. When the circumstances set out in Article 17.1 of the GDPR apply, https://tiovivobar.com/ will be obliged to delete your data without delay.

8.1.4. Right to data portability: You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format, and to transmit it to another data controller without hindrance, when the processing is based on your consent and is also carried out by automated means.

8.1.5. Right to restriction of processing: When the processing of your personal data has been restricted pursuant to a request from you, such data may only be processed, with the exception of storage, with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest. You have the right to obtain restriction of the processing of your personal data when one of the circumstances provided for in Article 18.1 of the GDPR applies.

8.1.6. Right to object: You have the right to object at any time, for reasons relating to your particular situation, to the processing of your personal data based on the legitimate interests of https://tiovivobar.com/ or third parties.

I remind you that when the legal basis for the processing of data is your consent, you will have the right to withdraw said consent always and in any case, and as easily as you gave it to https://tiovivobar.com/.

You also have the right to file a complaint with the respective supervisory authority, usually the Spanish Data Protection Agency, if you believe that I have not properly exercised your rights. For more information, you can visit their website at this link.

Finally, you also have the right not to be subject to a decision of https://tiovivobar.com/ based solely on automated processing, including profiling, which produces legal effects or significantly affects you in a similar way.

8.2. How you can exercise your data protection rights

You may exercise the aforementioned rights at any time by sending an email to the address listed in section 1 (Data Controller) or by sending a letter accompanied by a copy of your official identification document (DNI, NIE, etc.) to the Controller's address (also listed in section 1 of this Privacy Policy).

You can find more information about your rights, including forms and templates for exercising them, on this website of the Spanish Data Protection Agency: https://www.aepd.es/es/derechos-y-deberes/conoce-tus-derechos

9-. SECURITY MEASURES

User privacy, professional secrecy and the security of personal data are key principles and firm commitments in the actions and interactions of https://tiovivobar.com/ with personal data.

Taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of processing, as well as the risks of varying likelihood and severity for the rights and freedoms of natural persons, the Controller will implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk. These technical and organizational measures will be aimed at reducing and minimizing the risks of loss, misuse, alteration, unauthorized access, or disclosure of your personal information.

In other words, I will take the necessary measures to protect the confidentiality, integrity, and availability of your data, and they will apply exclusively to the purposes stated in this Policy.

To provide you with greater security, this website has an SSL (Secure Socket Layer) certificate installed, which ensures that information is encrypted throughout the entire journey from client to server.

10-. MODIFICATION OF THIS POLICY

In order to effectively implement the principle of proactive and consistent compliance with data protection regulations, as well as in compliance with our duty of transparency to data subjects, we may modify this Privacy Policy from time to time.

I will make every effort to notify you of any significant changes to this Privacy Statement that may impact your rights or interests as a personal data subject.

11-. MORE INFORMATION

To clarify any questions, issues, or concerns raised or unresolved by reading this Privacy Policy, you may contact us at the postal and email addresses listed in Section 1.

Last updated: May 2025