Legal information
Privacy policy
This page explains what personal data is processed when you visit audreypascual.com, for what purpose, on what legal basis, for how long and how you can exercise your rights.
1. Data controller
| Controller | Audrey Pascual Seco |
|---|---|
| Tax ID | 51513999W |
| Address | Avenida de Sierra Nevada 236, 28729 Cotos de Monterrey, Madrid, España |
| privacidad@audreypascual.com | |
| Website | audreypascual.com |
The address privacidad@audreypascual.com is the channel for any question about this policy and for exercising the rights set out in section 7. It is handled by the project's coordination team. The other channels published on the site (the sponsorship phone and email, and VLP's collaborations email) are commercial contact routes.
A data protection officer is not mandatory for this activity, so none has been appointed.
2. What data is processed and where it comes from
a) Browsing and measurement data (only if you accept cookies)
If you accept the cookie notice, Google Analytics 4 collects data about your visit: pages viewed, date and time, browser language, device and browser type, approximate location (city or region) and an identifier stored in the _ga cookie. If you reject or withdraw consent, none of this data is collected: Google's tag is not loaded and no request is sent. You can see the details in the cookie policy.
b) Communications we receive by email and by phone
When you write to any of the addresses published on the site, we receive and process the data you include: your name or that of the organisation you represent, your contact details (email address, phone number, company or role) and the content of your message, together with any files or links you choose to attach. The email's own metadata is also included (date, sender and copied addresses). If you call the sponsorship phone number, we only process the data you provide during the call.
c) Sponsorship and collaboration proposals
If your enquiry relates to a sponsorship proposal, a brand collaboration, participation in an event or a content project, we also process the data needed to assess it and reply to you: the identity of the company, agency or media outlet, the contact person's details, the financial or organisational terms you propose and the documents you provide (decks, proposals, contracts).
d) Data provided by companies, agencies, media and individuals
We may also receive personal data from third parties that does not come from you directly: for example, when a company, agency, media outlet or individual writes to us proposing a collaboration, requesting information or graphic material, asking for an interview, or providing the contact details of another person in their organisation. In those cases we only process the data needed to deal with the communication.
e) Third-party content (the Instagram video)
The video in the skiing section only loads if you click the “Load the reel” button. When you do, your browser connects to Instagram (Meta Platforms Ireland Limited), which may process your IP address and device data under its own privacy policy. If you do not click it, no such connection takes place.
This site has no forms, no user area, no newsletters or mailing lists and no shopping carts, and it does not build commercial profiles or process data for advertising purposes. It is not aimed at children under 14 either.
3. Purpose and legal basis
| Processing | Purpose | Legal basis |
|---|---|---|
| Audience measurement | Knowing how many people visit the site, which sections they view and on what device, in order to improve the site and the information it offers. | Your consent (art. 6(1)(a) GDPR), which you can withdraw at any time from “Cookie settings” without affecting the lawfulness of prior processing. |
| Dealing with communications received | Reading, assessing and answering the emails we receive at the published addresses. | Your consent when writing to us and the legitimate interest (art. 6(1)(f) GDPR) in dealing with communications addressed to the owner. |
| Assessing sponsorship and collaboration proposals | Studying the proposal, negotiating its terms and, if it goes ahead, managing the relationship and the resulting obligations. | The legitimate interest in dealing with commercial proposals and, where the relationship is formalised, performance of a contract (art. 6(1)(b) GDPR). |
| Attending to media enquiries | Responding to requests for information, graphic material or interviews. | The legitimate interest in attending to the media and, where applicable, your consent. |
| Compliance with legal obligations | Keeping documentation where the law requires it (for example, tax or accounting obligations arising from a sponsorship contract). | Compliance with a legal obligation (art. 6(1)(c) GDPR). |
No automated decisions are made and no profiling is carried out with the data described above.
4. Recipients and providers
Personal data is not sold or shared with third parties for commercial purposes. The following have, or may have, access to it:
- Google Ireland Limited — Google Analytics 4, for audience measurement, and only if you accept cookies. It processes the data on the controller's behalf. Policy: policies.google.com/privacy.
- Meta Platforms Ireland Limited — only if you click “Load the reel”, when your browser connects to Instagram. In that case it acts as an independent controller of the processing it carries out, under its own policy: privacycenter.instagram.com/policy.
- Ender — the project's digital partner provides the website hosting and the email service for the
audreypascual.comdomain, where the published mailboxes are located. It accesses the data only to provide those services and, to that extent, processes the data on the controller's behalf. The server may log IP addresses in its access logs for security and operational purposes.
Where a provider processes data on the controller's behalf, it will do so under the corresponding data processing agreement as required by article 28 GDPR.
Data may also be disclosed to public authorities, courts or tribunals where there is a legal obligation to do so, and to legal or tax advisers where necessary to bring or defend claims.
Collaborations. The address contacto@vlpsports.com shown in the collaborations section is a channel the owner makes available to receive proposals addressed to the VLP brand, and it is handled together with the project's coordination team. Where a third party itself determines the purposes and means of a processing activity, it will act as an independent controller and its own privacy policy will apply.
5. International transfers
Google and Meta may process data outside the European Economic Area, as they are groups with international infrastructure. They apply the safeguards described in their respective privacy policies, linked in the section above, which include the European Commission's standard contractual clauses and, where applicable, their certification under the EU-US Data Privacy Framework.
The website hosting and the domain email are located on a server in the European Union (Finland, on Hetzner Online GmbH infrastructure), so the communications you send us do not involve an international transfer on that account.
6. How long data is kept
- Audience measurement: according to the retention configured in the Google Analytics 4 property (14 months for user data by default) and the cookie lifetimes described in the cookie policy. Once consent is withdrawn, no new information is sent.
- Communications received (emails and calls): for as long as necessary to deal with the enquiry and, afterwards, for as long as needed to evidence the reply and address any liabilities arising from it.
- Sponsorship and collaboration proposals that do not go ahead: deleted once dismissed, unless there is a legitimate interest in keeping them to evidence the proposal.
- Contractual relationships arising from a sponsorship or collaboration: for the duration of the relationship and, afterwards, for the applicable statutory limitation, tax and accounting periods.
7. Your rights
You may exercise the following rights at any time:
- Access: to know whether we process your data and to obtain a copy.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to ask us to delete your data when it is no longer necessary.
- Objection: to object to processing based on legitimate interest.
- Restriction: to ask us to suspend processing while a complaint is resolved.
- Portability: to receive the data you provided to us by automated means in a structured format, where technically feasible.
- Withdraw consent at any time, without affecting the lawfulness of prior processing. For analytics, simply press “Cookie settings” in the footer of any page.
To exercise them, write to privacidad@audreypascual.com stating in the subject the right you are exercising. We may need you to prove your identity if there is reasonable doubt about who is making the request. We will reply within one month at the latest, extendable by two months if the request is complex.
This is a free right and you do not have to justify your request. If you believe it has not been handled correctly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), Calle Jorge Juan 6, 28001 Madrid, or through www.aepd.es.
8. Minors
The site is not aimed at children under 14 and we do not knowingly collect personal data from children under that age. If we become aware that we have received data from a child under 14, we will delete it.
9. Changes to this policy
If the processing activities, the providers or the applicable regulations change, this policy will be updated and will show the date of the last revision. We recommend reviewing it from time to time.