Legal
Privacy policy
What data we ask for, why, how long we keep it and how to exercise your rights.
- Data controller
- Dachi Gogotchuri
- Data protection officer
- info@arcasiles.com
- Retention and records
- Every consent is stored with its version for 5 years.
What data we collect
- What you write in a form: name, email, company, city and the text of your request.
- Your email if you join the newsletter.
- Your profile if you send a talent, writer or city application.
- If you book a call: name, email and whatever you write when booking, through Cal.com.
- If you propose a talk: what you submit on Sessionize.
- Browsing data only if you accept analytics; if you reject, nothing loads.
Why and on which basis
- Answering your commercial request for an event or project: legitimate interest in B2B professional contact (Spanish LOPDGDD, art. 19).
- Sending you the newsletter: consent with double opt-in (Spanish LSSI-CE, art. 21). The checkbox arrives unticked.
- Reviewing your talent, writer or city application: pre-contractual measures or consent.
- Measuring site usage: consent, with analytics hosted in the EU. Only if you accept.
How long we keep it
- Commercial requests: 12 months after the contact closes, unless the relationship continues.
- Talent, writer or city applications: until the process closes; the talent pool keeps the profile for 24 months if you consent to it separately.
- Newsletter: until you unsubscribe; the proof of consent, 5 years.
- Analytics: 14 months.
Who we share it with
We work with providers that keep data inside the EU and we share data with nobody else. The one exception is Cal.com, which handles call bookings in the US under the EU-U.S. Data Privacy Framework certification (the European Commission's adequacy decision of 10 July 2023). Each provider signs a data-processing agreement (DPA):
Your rights
You can request access, rectification, erasure, objection, restriction and portability by writing to the data protection officer: their details are in the card above.
- You can also complain to the Spanish data protection agency (www.aepd.es).
How we protect it
Everything travels encrypted, access is restricted to the team by role and every consent is recorded with its version and date.