Privacy Policy

Perfecto, gracias por el aviso previo 👍

Aquí tienes la traducción COMPLETA, literal y sin omitir absolutamente nada, en inglés legal (UK neutral), manteniendo estructura, numeración, repeticiones, tablas y alcance jurídico del texto original.


Privacy Policy

This legal text provides details on how we collect and process your personal data through the use of our website yurrutia.com, including any information you may provide to us through the website when you purchase a product, register for our newsletter or provide your data through the form enabled for this purpose.

By providing us with your data, we inform you that our services are not available to persons who are legally prevented from giving consent. Therefore, when you submit forms to us, you guarantee that you have sufficient legal capacity to grant consent.

Below, we inform you about the data protection policy of: Yago Urrutia López


1. Data Controller

Contact details of the data controller:

Yago Urrutia López, with Tax ID (NIF): 05967714L and registered address at: C/ Las Huertas 9, Derecha, telephone: +34 654 428 674 and email: info(at)yurrutia.com


2. What data do we collect?

The General Data Protection Regulation (GDPR) defines personal data as any information relating to an identified or identifiable natural person, that is, any information capable of identifying a person. This does not include anonymous or aggregated data.

Personal data that may be collected directly from the data subject shall be treated confidentially and shall be incorporated into the corresponding processing activities owned by Yago Urrutia López.

On our website we may process certain types of personal data, which may include:

  • Identity data: name, surname(s) and tax identification number (NIF).
  • Contact data: email address, telephone number and billing address.
  • Profile data: password.
  • Marketing and communications data: preferences for receiving marketing communications from us and preferred means of communication.

We do not collect any data relating to special categories of personal data (those revealing ethnic or racial origin, political opinions, religious or philosophical beliefs, trade union membership, health data, genetic or biometric data).

If you are required to provide personal data by law or under the terms of a contract between us and you and you refuse to provide such data, we may not be able to perform such contract or provide the service, and you must notify us in advance.


3. How do we collect your personal data?

The methods we use to collect personal data are:

  • Through forms on our website, through our contact email, by telephone or by postal mail, when you:
    • Request information about our products or services
    • Purchase our products
    • Subscribe to any of our services or publications
    • Send us your comments

In order to ensure the quality of our portal, we reserve the right to reject any registration request or to suspend or cancel a previously accepted registration if we consider that it does not meet these requirements or any other applicable law or regulation. If this occurs, we will attempt to explain the reasons for our decision, although we cannot guarantee to do so in all cases.

  • Through technology or automated interactions: on our website we may automatically collect technical data about your equipment, browsing actions and usage patterns. This data is collected through cookies or similar technologies. If you wish to obtain further information, you may consult our Cookie Policy.
  • Through third parties:
    • Google: analytics data or search data. Outside the European Union.

4. Purpose and legal basis for using your data

The most common uses of your personal data are:

  • For the formalisation of a contract between Yago Urrutia López and you
  • When you give your consent to the processing of your data
  • When we need them to comply with a legal or regulatory obligation
  • When necessary for our legitimate interests or those of a third party

The User may withdraw the consent given at any time by sending an email to info(at)yurrutia.com or by consulting the section on the exercise of rights below.

Below is a table showing how we will use your personal data, the legal basis for its use and the types of personal data processed. We may process personal data for an additional legal reason; if you require further details, you may send an email to info(at)yurrutia.com.

FormPurposeType of DataLegal Basis
ContactThe purpose is to manage contacts and information requests received via the website– Name– Email– TelephoneConsent of the data subject (Art. 6.1.a GDPR)Pre-contractual measures (Art. 6.1.b GDPR)Processing is necessary for the purposes of the legitimate interests pursued by the data controller (Art. 6.1.f GDPR)

Commercial communications: you will only receive communications if:

  • You requested information or entered into a contract with us for a product or service.
  • You provided us with your data by accepting the corresponding checkbox on our form.
  • You have not expressed your wish to stop receiving such communications.

We obtain your express consent before sending you any communication, and you may request at any time that we stop sending communications by emailing info(at)yurrutia.com.

When you choose to stop receiving our communications, your personal data will continue to be stored as a result of the contract entered into by you, in order to comply with legal requirements.

Purpose limitation: we will only use your data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another purpose, in which case we will notify you in advance so that you are informed of the legal basis for its processing, provided that the new purpose is compatible with the original purpose.


5. How long will we retain your data?

Your data will be retained for the time necessary to fulfil the purpose for which it was collected and to determine any potential liabilities that may arise from that purpose and from the processing of the data. The provisions of the applicable regulations regarding retention periods shall apply.

Subscriber data via email or form: from the moment the user subscribes until they unsubscribe.


6. Minors

Yago Urrutia López does not authorise minors under the age of 14 to provide their personal data through the means enabled on this website (completion of web forms for requesting services or contact, or by sending emails). Therefore, persons who provide personal data through these means formally declare that they are over 14 years of age, and Yago Urrutia López is exempt from any liability for failure to comply with this requirement.

If your child is under the established age limit and has provided personal information to Yago Urrutia López, please contact us so that you may request the exercise of the applicable rights.

In cases where the services offered by Yago Urrutia López are intended for minors under 14 years of age, appropriate means will be provided to obtain the authorisation of the parents or legal guardians of the minor.


7. Exercise of Data Protection Rights

How can these rights be exercised?

Users may send a request to the registered address of Yago Urrutia López or to the email address info(at)yurrutia.com, enclosing in both cases a copy of their national identity document (DNI) or another similar identification document, in order to exercise the following rights:

  • Right of access to your personal data: you may ask Yago Urrutia López whether it is processing your personal data.
  • Right to rectification of inaccurate data or right to erasure (“right to be forgotten”).
  • Right to restriction of processing: in this case, the data will only be retained by Yago Urrutia López for the exercise or defence of legal claims.
  • Right to object to processing: Yago Urrutia López will stop processing the data as instructed, unless for legitimate reasons or for the exercise or defence of possible claims the data must continue to be processed.
  • Right to data portability: where you wish your data to be processed by another entity, Yago Urrutia López will provide portability of your data to the new controller.

You may use the templates made available by the Spanish Data Protection Agency to exercise these rights: Here

Right to lodge a complaint with the AEPD: if you believe there is a problem with the way Yago Urrutia López is processing your data, you may submit a complaint to the competent supervisory authority, which in Spain is the Spanish Data Protection Agency (Agencia Española de Protección de Datos).

We may request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of the other rights mentioned above). This is a security measure to ensure that personal data is not disclosed to any person who does not have the right to receive it.

We will respond to all requests within the legally established period of one month. However, it may take us more than one month if your request is particularly complex. In this case, we will notify you and keep you informed.


8. Data Disclosure: Provision of Services

In the performance of our work, we may need the assistance of third parties who will only process the data in order to provide the contracted service and with whom we have implemented the appropriate measures to guarantee your rights:

  • Service providers providing system administration and information technology services.
  • Professional advisers, including lawyers, auditors and insurers, providing banking, legal, insurance and accounting consultancy services.

All data processors to whom we transfer your data will respect the security of your personal data and will process it in accordance with the GDPR.

We only allow such processors to process your data for specified purposes and in accordance with our instructions. Nevertheless, in compliance with the principle of transparency, you may request a list of these service providers by emailing info(at)yurrutia.com.


9. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Furthermore, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know such data. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

We have implemented procedures to address any suspected breach of your personal data and will notify you and the relevant supervisory authority in the event of a security breach, as required by Articles 33 and 34 of the GDPR.