pieldeterciopelo.com
Last updated: August 30, 2026.
1. Data Controller
- Name: María
- Address: Andalucía
- Email: be*******@**************lo.com
Based in Spain (EU). Processing complies with the GDPR, LOPDGDD, and, where applicable, US privacy laws including the CCPA/CPRA.
2. Information We Collect
2.1. Information You Provide Directly
Name, email address, and content you include when using the contact form, posting a comment, or subscribing to a newsletter.
2.2. Information Collected Automatically
IP address, browser type, operating system, pages visited, time on pages, and other browsing data collected via Google Analytics and Google Tag Manager.
2.3. Information From Third Parties
We do not purchase personal information from data brokers.
3. How We Use Your Information
- Contact form: to respond to your inquiries, including skincare questions and product recommendations. Legal basis: consent.
- Comments: to manage blog comments. Legal basis: legitimate interest.
- Newsletter: to send new reviews, routines, vegan beauty news. Legal basis: explicit consent.
- Analytics: to analyze traffic and improve the experience. Legal basis: consent to cookies.
- Legal obligations, where applicable.
4. Cookies
See our Cookie Policy for full details.
5. Third-Party Service Providers
- Google Analytics / Google Tag Manager: web analytics (Google LLC, USA). Transfers covered by EU-US Data Privacy Framework / Standard Contractual Clauses.
We do not sell your personal information.
6. International Data Transfers
Transfers outside the EEA are protected by the EU-US Data Privacy Framework, Standard Contractual Clauses, or other GDPR-compliant mechanisms.
7. Data Retention
Contact data: retained until inquiry is resolved plus legal retention periods. Comment data: retained while the comment is published. Analytics: per Google’s retention policies.
8. Your Rights
8.1. GDPR Rights (EU/EEA Users)
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Lodge complaints with the Spanish DPA (www.aepd.es) or your local authority.
8.2. US Privacy Rights
California residents: rights under CCPA/CPRA (know, delete, opt out of sale — we don’t sell data, non-discrimination). Other US states: similar rights under respective laws.
8.3. How to Exercise
Contact: [YOUR CONTACT EMAIL]. Response: 30 days (GDPR) / 45 days (CCPA/CPRA).
9. Children’s Privacy
We do not knowingly collect data from children under 13 (COPPA) or 16 (GDPR) without parental consent.
10. Data Security
Appropriate technical and organizational measures are in place, though no Internet transmission is 100% secure.
11. Changes
Updated versions posted with a revised “Last updated” date.
12. Contact
[be*******@**************lo.com