Privacy policy mrzstorytelling

• Identity of the party responsible: Marcos Richi de Zavala
• Trade name: Mrzstorytelling.es
• Tax ID: 07495025S
• Address: Calle Pozo Nuevo, 25 Bajo C. Alpedrete
• Email: marcos@mrzstorytelling.es
• Activity: Copywriting

For the purposes of the General Data Protection Regulation cited above, the personal data you send me through the website's forms will be processed under the category of "Website users and subscribers".

For the processing of my users' data, I implement all the technical and organisational security measures established under current legislation.

When processing your personal data, I will apply the following principles, which align with the requirements of the new European data protection regulation:

• Principle of lawfulness, fairness and transparency: I will always require your consent to process your personal data for one or more specific purposes, which I will inform you of beforehand with complete transparency.
• Principle of data minimisation: I will only request data that is strictly necessary for the purposes for which it is required. The minimum possible.
• Principle of storage limitation: data will be kept for no longer than necessary for the purposes of processing; depending on the purpose, I will inform you of the corresponding retention period — in the case of subscriptions, I will periodically review my lists and remove inactive records after a considerable amount of time.
• Principle of integrity and confidentiality: Your data will be processed in a way that guarantees adequate security and confidentiality. I take all necessary precautions to prevent unauthorised access to, or misuse of, my users' data by third parties.

The personal data I process at Mrzstorytelling.es comes from:

• The contact form.
• Mailing list subscription forms.
• Blog comments.

Anyone has the right to obtain confirmation as to whether Mrzstorytelling.es is processing personal data concerning them.

Data subjects have the right to:

• Request access to their personal data.
• Request its rectification or erasure.
• Request the restriction of its processing.
• Object to the processing.
• Request data portability.

Data subjects may access their personal data, as well as request the rectification of inaccurate data or, where applicable, request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, data subjects may request the restriction of the processing of their data, in which case it will only be kept for the exercise or defence of claims.

In certain circumstances and for reasons relating to their particular situation, data subjects may object to the processing of their data. Marcos Richi de Zavala-Mrzstorytelling.es will stop processing the data, except for compelling legitimate reasons, or the exercise or defence of possible claims. As a data subject, you have the right to receive the personal data concerning you that you have provided to me, in a structured, commonly used, machine-readable format, and to transmit it to another controller when:

• The processing is based on consent.
• The data was provided by the data subject.
• The processing is carried out by automated means.

When exercising your right to data portability, you will have the right to have your personal data transmitted directly from one controller to another where technically feasible.

Data subjects also have the right to effective judicial protection and to lodge a complaint with the supervisory authority — in this case, the Spanish Data Protection Agency — if they consider that the processing of personal data concerning them infringes the Regulation.

When a user connects with this website, for example to comment on a post, subscribe or make contact, they are providing personal information for which Mrzstorytelling.es is responsible. That information may include personal data such as your IP address, name or username, email address, or other data provided in a message or attachments. By providing this information, the user consents to their information being collected, used, managed and stored by https://www.mrzstorytelling.es, only as described in the Legal Notice and Terms of Use and in this Privacy Policy.

Mrzstorytelling.es has different systems for capturing personal information, and I process the information provided by data subjects for the following purpose per capture system (forms):

• Contact form: I request the following personal data: Name, Email, to respond to requests from users of https://www.mrzstorytelling.es, a subject, and the message with the information the user wishes to send. For example, I may use that data to respond to your request and address doubts, complaints, comments or concerns you may have regarding the information included on the website, the services provided through the website, the processing of your personal data, questions regarding the legal texts included on the website, as well as any other queries you may have that are not subject to contracting terms. I inform you that the data you provide will be located on Webempresa's servers (provider of Marcos Richi de Zavala-Mrzstorytelling.es) within the EU (France) and on Google Inc.'s servers outside the EU in the USA. Google adheres to the EU-US Privacy Shield agreement, approved by the European Data Protection Board.

Mailing list subscription forms: In this case, I request the following personal data: name and email, to manage the subscription list and send new newsletters to the email address provided by the user when subscribing. Email newsletters are managed by the Brevo service – 106 boulevard Haussmann, 75008 Paris, France

• I inform you that the data you provide will be located on CPC's servers (provider of Marcos Richi de Zavala-Mrzstorytelling.es) in Spain. CPC processes data for the purpose of providing its web platform services to Marcos Richi de Zavala-Mrzstorytelling.es.
• Blog comment form: To comment on posts on the blog at https://www.mrzstorytelling.es, users do not need to be registered on this blog. Users may post as many comments as they wish and reply to previous ones. I inform you that the data you provide will be located on Webempresa's servers (provider of Marcos Richi de Zavala-Mrzstorytelling.es) within the EU (France).

There are other purposes for which I process your personal data:

• To ensure compliance with the terms of use and applicable law. This may include developing tools and algorithms that help this website ensure the confidentiality of the personal data it collects.
• To support and improve the services offered by this website.
• Other non-identifying data is also collected via certain cookies downloaded onto the user's computer while browsing this website, detailed in the Cookie Policy.
• Mrzstorytelling.es may have a presence on social networks. The processing of data carried out on people who follow the official pages of https://www.mrzstorytelling.es on social networks will be governed by this section, as well as by the terms of use, privacy policies and access regulations belonging to the relevant social network in each case and previously accepted by the user of Marcos Richi de Zavala-Mrzstorytelling.es. Data will be processed for the purpose of properly managing its presence on the social network, informing about Mrzstorytelling.es's activities, products or services, as well as for any other purpose permitted by the social network's regulations. Under no circumstances will follower profiles on social networks be used to send individually targeted advertising.

In accordance with the European General Data Protection Regulation (GDPR) 2016/679, Marcos Richi de Zavala-Mrzstorytelling.es will be responsible for processing data relating to website users and subscribers.

Mrzstorytelling.es does not sell, rent or transfer personal data that could identify the user, nor will it do so in the future, to third parties without prior consent. However, in some cases collaborations may be carried out with other professionals; in such cases, users' consent will be requested, informing them of the collaborator's identity and the purpose of the collaboration. This will always be done under the strictest security standards.

The legal basis for the processing of your data is: consent.

To make contact, subscribe or post comments on this website, consent to this privacy policy is required.

The prospective or commercial offer of products and services is based on the consent requested from you, and under no circumstances will the withdrawal of this consent affect the performance of the subscription contract.

The categories of data processed are identifying data.

Under no circumstances are specially protected categories of data processed.

The personal data provided will be retained until the data subject requests its deletion.

Many of the tools I use to manage your data are provided by third parties.

To provide services strictly necessary for carrying out the activity, https://www.mrzstorytelling.es shares data with the following providers under their respective privacy terms:

Google Analytics: a web analytics service provided by Google, Inc., a Delaware company headquartered at 1600 Amphitheatre Parkway, Mountain View, California, CA 94043, USA ("Google"). Google Analytics uses "cookies", text files placed on your computer, to help https://www.mrzstorytelling.es analyse how users use the website. The information generated by the cookie about your use of https://www.mrzstorytelling.es (including your IP address) will be transmitted directly to and stored by Google on servers in the United States.

Google AdSense: a web advertising service provided by Google, Inc., a Delaware company headquartered at 1600 Amphitheatre Parkway, Mountain View, California, CA 94043, USA ("Google"). Google AdSense uses "cookies", text files placed on your computer, to help https://www.mrzstorytelling.es display advertising on the website. The information generated by the cookie about your use of https://www.mrzstorytelling.es (including your IP address) will be transmitted directly to and stored by Google on servers in the United States, and allows relevant ads to be shown based on a user's previous visits to this or other websites. Users can disable personalised advertising by visiting Ad Settings

• Hosting: Arsys, in compliance with Article 10 of Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSICE), makes its identifying details available to its customers.
• Company name: Arsys Internet S.L.U.
• Registered address: C/ Madre de Dios nº 21, 26004, Logroño (La Rioja), Spain
• Phone: +34 941 620 100
• Tax ID: B-85294916
• Email: info@arsys.es
• Fax: +34 941 204 793
• Commercial registry details: Arsys Internet, S.L.U., a Sole-Shareholder Limited Liability Company, registered with the Commercial Registry of La Rioja, in Volume 681, Folio 119, Sheet LO-12326.

Details regarding the prior administrative authorisation for carrying out the activity: Operator registered with the Register of Electronic Communications Network and Service Operators of the Telecommunications Market Commission (CMT), as an authorised holder for the operation of a fixed public electronic communications network (01/10/2008), for the provision of data transmission services through the interconnection of local area networks (30/03/2011), packet or circuit data switching, and the resale of transmission capacity (10/11/2011).

When browsing https://www.mrzstorytelling.es, non-identifiable data may be collected, which may include IP addresses, (approximate) geographic location, a record of how services and sites are used, and other data that cannot be used to identify the user. Non-identifying data also includes data related to your browsing habits through third-party services. This website uses the following third-party analytics services:

• Google Analytics.

I use this information to analyse trends, administer the site, track users' movements around the site, and to collect demographic information about my user base as a whole.

https://www.mrzstorytelling.es is committed to the use and processing of users' personal data, respecting its confidentiality and using it in accordance with its purpose, as well as complying with its obligation to safeguard it and implementing all measures to prevent unauthorised alteration, loss, processing or access, in accordance with current data protection regulations.

This website includes an SSL certificate. This is a security protocol that ensures your data travels intact and securely — that is, the transmission of data between a server and a web user, and vice versa, is fully encrypted.

https://www.mrzstorytelling.es cannot guarantee the absolute impenetrability of the Internet and therefore cannot guarantee against data breaches resulting from fraudulent access by third parties.

Regarding the confidentiality of processing, Marcos Richi de Zavala-Mrzstorytelling.es will ensure that anyone authorised by Mrzstorytelling.es to process client data (including staff, collaborators and providers) is under an appropriate duty of confidentiality (whether contractual or legal).

Should a security incident occur, once Mrzstorytelling.es becomes aware of it, the Client will be notified without undue delay and will be provided with timely information related to the Security Incident as it becomes known or as reasonably requested by the Client.

As a user, you are solely responsible for the truthfulness and accuracy of the data you submit to https://www.mrzstorytelling.es, releasing Marcos Richi de Zavala-Mrzstorytelling.es from any liability in this regard.

Users guarantee and are responsible, in any case, for the accuracy, currency and authenticity of the personal data provided, and undertake to keep it duly updated. The user agrees to provide complete and correct information in the contact or subscription form.

The user declares that they have been informed of the terms regarding the protection of personal data, accepting and consenting to its processing by Marcos Richi de Zavala-Mrzstorytelling.es in the manner and for the purposes indicated in this privacy policy.

Consent given, both for the processing and for the transfer of data subjects' data, is revocable at any time by notifying Marcos Richi de Zavala-Mrzstorytelling.es under the terms set out in this Policy for exercising ARCO rights (access, rectification, cancellation, objection). This revocation will never have retroactive effect.

Marcos Richi de Zavala-Mrzstorytelling.es reserves the right to amend this policy to adapt it to legislative or case-law developments, as well as to industry practices. In such cases, Marcos Richi de Zavala-Mrzstorytelling.es will announce the changes introduced on this page with reasonable notice before they take effect.

In accordance with the LSSICE, https://www.mrzstorytelling.es does not engage in SPAM practices, and therefore does not send commercial emails that have not been previously requested or authorised by the user. Accordingly, in each of the forms on the website, the user has the option of giving their express consent to receive the newsletter, independently of any commercial information specifically requested.

In accordance with Law 34/2002 on Information Society Services and Electronic Commerce, https://www.mrzstorytelling.es undertakes not to send commercial communications without properly identifying them as such.