1. Data controller

Owner: Eusebio Bullido Rodríguez
Trade name: CuReTeK
Tax ID (NIF): 46957438-V
Business address: [PROVISIONAL ADDRESS PENDING UPDATE BEFORE THE FINAL PUBLICATION OF THE WEBSITE AND THE START OF ACTIVITY IN MALLORCA]
Contact email: curetek@gmail.com

2. Purpose of the processing

At CuReTeK, I process the personal data provided by users through this website for the following purposes:

• To respond to enquiries, requests for information, or contact requests received through the form or by email.
• To manage communications related to the services offered by CuReTeK.
• To apply, where appropriate, pre-contractual measures when the enquiry is related to the possible hiring of a service.
• To protect the website against automated submissions, spam, or abuse through technical verification and security systems.
• To integrate, where applicable, third-party audiovisual content, such as YouTube videos, the loading or playback of which may involve technical processing associated with the operation of that service.

Personal data will not be used to send unsolicited advertising or to create automated profiles.

3. Data collected

Through the contact form and the communication channels available on this website, I may process the following categories of data:

• Identification data, such as name and surname.
• Contact data, such as email address and, where applicable, telephone number or any other means voluntarily provided by the user.
• Data related to the enquiry, such as the type of service requested, contact preference, and message content.
• Minimum technical data necessary for the operation of the website, spam prevention, form security and, where applicable, the loading or playback of audiovisual content integrated from third-party services.

Users must only provide data that is adequate, relevant, and limited to what is necessary. It is recommended not to send passwords, bank details, or specially sensitive information through the contact form.

4. Legal basis for the processing

The legal basis for the processing of personal data will be, depending on the case:

• The data subject’s consent, when they voluntarily submit an enquiry through the form or by email.
• The application of pre-contractual measures, when the request is related to information prior to the possible provision of a service.

Where processing is based on consent, that consent may be withdrawn at any time, without affecting the lawfulness of the processing carried out before its withdrawal.

5. Mandatory or optional nature of the data

The fields marked as mandatory in the form must be completed in order to process the enquiry.

If the user does not provide the minimum required data, it may not be possible to properly handle the request or respond to the message.

6. Data retention

Personal data will be kept only for as long as strictly necessary to respond to the enquiry or manage the relationship arising from it.

As a general rule:

• Enquiries that do not lead to the provision of a service will be kept for a maximum period of 6 months from the last interaction, unless there is a legitimate reason justifying a longer retention period.
• If the enquiry leads to the provision of a service, the data may be kept for the time necessary to manage that service and, afterwards, for the periods required by applicable law or for the time necessary for the establishment, exercise, or defence of possible legal claims.

Data may be temporarily stored both in the email system and, where applicable, in the website database or in technical backups associated with its operation.

7. Recipients of the data

As a general rule, I will not disclose personal data to third parties, except where legally required or where this is necessary for the proper provision of technical services related to the operation of the website or communications.

In particular, the data may be processed by providers acting as data processors or technical service providers, such as:

• web hosting and website technical support services;
• email and notification delivery services;
• protection services against spam, bots, or abusive access;
• technology providers necessary for the ordinary operation of the website.

Currently, this website uses tools such as Cloudflare Turnstile as an anti-spam measure. It may also integrate content hosted on YouTube in enhanced privacy mode through the youtube-nocookie.com domain. For as long as a Gmail account is used, and to the extent that Google or Cloudflare services linked to the operation of the website are used, certain technical or communication data may be managed through services provided by those providers.

8. International data transfers

Some of the technology providers used by this website may be located outside the European Economic Area or may allow international access to the data.

Where this occurs, such transfers will be carried out in accordance with the mechanisms provided for under applicable data protection law, including, where appropriate, adequacy decisions, standard contractual clauses, or other appropriate safeguards.

To the extent that CuReTeK uses Google or Cloudflare services, including those related to email, anti-spam protection, or the integration of third-party audiovisual content, the processing may involve international data transfers associated with the use of those platforms.

9. Minors

This website is not specifically intended for minors.

Where data processing is based on consent, minors under the age of 14 must refrain from providing their personal data without the authorisation of their parents or legal representatives.

If data submitted by a minor without the required authorisation is detected, such data may be deleted.

10. Users’ rights

Any person has the right to obtain confirmation as to whether or not I am processing personal data concerning them at CuReTeK.

Likewise, where applicable, they may exercise the following rights:

• Right of access.
• Right to rectification.
• Right to erasure.
• Right to restriction of processing.
• Right to object.
• Right to data portability.
• Right to withdraw consent at any time, where the processing is based on consent.

To exercise these rights, the data subject may send a request to:

Email: curetek@gmail.com
Postal address: [PROVISIONAL ADDRESS PENDING UPDATE BEFORE THE FINAL PUBLICATION OF THE WEBSITE AND THE START OF ACTIVITY IN MALLORCA]

The request must sufficiently identify the applicant and clearly indicate the right they wish to exercise.

Likewise, if the data subject considers that their rights have not been properly addressed, they may lodge a complaint with the Spanish Data Protection Agency (AEPD).

11. Security measures

CuReTeK applies reasonable technical and organisational measures to protect personal data against loss, alteration, unauthorised access, or improper processing, taking into account the nature of the data processed and the risks associated with the processing.

However, users must be aware that no security measure on the Internet can guarantee absolute protection.

12. Accuracy of the data

Users guarantee that the data provided is true, accurate, up to date, and belongs to them or that they are authorised to communicate it.

Users will be responsible for any damage or harm that may arise from the communication of false, inaccurate, or third-party data without the relevant consent.

13. Changes to this privacy policy

This Privacy Policy may be updated whenever necessary in order to adapt it to legal, technical, or functional changes affecting the website.

Where the changes are relevant, the new updated date will be reflected in this same document.