Privacy Policy

1. Data controller

Owner: Pitu Sabadí

Website: pitusabadi.tech

Contact email: pitu@pitusabadi.tech

2. Data we collect

Depending on how you interact with the site, we may collect the following data:

2.1 Newsletter

• Data collected: email address.
• Purpose: sending communications about product development, AI integration and other professional news.
• Legal basis: consent of the data subject (art. 6.1.a GDPR).
• Processor: Brevo (Sendinblue SAS), with servers in the EU. Brevo privacy policy.

2.2 Browsing data

• Data collected: IP address, browser type, pages visited, date and time of access.
• Purpose: ensuring the security of the site and improving the service.
• Legal basis: legitimate interest of the controller (art. 6.1.f GDPR).

2.3 Web analytics (future)

• Processor: Google LLC (Google Analytics 4), currently not active.
• Legal basis: consent of the data subject (art. 6.1.a GDPR). It will only be activated once the user accepts analytics cookies.

3. Purpose of processing

4. Data recipients

Your data may be shared with the following processors, exclusively for the purposes described:

• Brevo (Sendinblue SAS) — email marketing management. Servers in the EU. More information.
• Google LLC — web analytics (future, once activated). Adheres to the EU-US Data Privacy Framework. More information.

We do not sell or transfer your personal data to third parties for commercial purposes.

5. International transfers

Some of our processors (Google) are based in the United States. These transfers are covered by:

• The EU-US Data Privacy Framework, which guarantees an adequate level of protection according to the European Commission.
• Standard contractual clauses approved by the European Commission, where applicable.

Brevo (Sendinblue) stores data on servers within the European Union.

6. Retention period

• Newsletter: until you unsubscribe or withdraw your consent.
• Browsing data: a maximum of 12 months, unless legally required otherwise.
• Analytics cookies: as set out in the Cookie policy.

7. Your rights

Under the GDPR and the LOPDGDD, you have the right to:

• Access: know what personal data of yours we process.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request the deletion of your data when it is no longer necessary.
• Objection: object to the processing of your data in certain circumstances.
• Portability: receive your data in a structured, commonly used format.
• Restriction: request restriction of processing in the cases provided for by law.

To exercise any of these rights, write to us at pitu@pitusabadi.tech setting out your request and attaching a copy of your ID document.

You can also lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe your rights have not been respected.

8. Security measures

We apply technical and organisational measures to protect your personal data, including:

• Encrypted communications over HTTPS/TLS.
• CSRF tokens to protect against request forgery attacks.
• Restricted access to personal data.

9. Updates

This policy may be updated to reflect changes in our practices or in applicable regulations. The date of the last update is shown at the top of the document. We recommend reviewing it periodically.