Privacy Policy

1. Identity of the Data Controller

The entity responsible for processing your personal data collected via cheersquadrankt.hair is:

Legal Name: Cheersquadrankt Culinary Media S.L.
Tax ID / CIF: B98471203
Registered Address: Carrer del Pintor Sorolla, 14, 46002 València, Spain
Official Contact Email: [email protected]
Data Protection Officer (DPO): [email protected]

2. Categories of Data Collected

We collect personal data strictly necessary to deliver culinary instructional content and manage user communications:

• Voluntary Form Submissions: When you complete our contact or inquiry forms, we capture your name, email address, chosen topic category, and the contents of your message.
• Technical and Server Log Data: Upon accessing our servers, your browser transmits IP addresses (truncated where possible for privacy), browser version, operating system, referencing URL, and timestamp records.
• Analytical Metrics: If non-essential cookies are accepted, we collect pseudonymized metrics regarding page views, scroll depth, and interaction duration to optimize guide layout.

3. Legal Bases for Processing

We process your personal information under the following legal frameworks set forth in Article 6 of the GDPR:

• Consent (Art. 6(1)(a) GDPR): For non-essential analytics cookies and voluntary email newsletter sign-ups. Consent can be revoked at any time.
• Contractual Performance & Pre-contractual Measures (Art. 6(1)(b) GDPR): To respond to correspondence, inquiries, or culinary workshop participation requests initiated by you.
• Legitimate Interests (Art. 6(1)(f) GDPR): To ensure server security, prevent distributed denial-of-service (DDoS) threats, and protect website integrity.

4. Third-Party Data Processors

We do not sell, rent, or trade your personal data to commercial data brokers. We share data only with service providers operating under strict Data Processing Agreements (DPAs) that comply with European data protection standards:

• Cloud Hosting Infrastructure: Tier-IV European datacenter providers managing static file distribution and DNS resolution.
• Email Transmission Services: Secure SMTP routing providers adhering to end-to-end TLS encryption standards.
• Legal and Regulatory Authorities: Government agencies or courts only when strictly mandated by binding European or Spanish statutory obligations.

5. International Data Transfers

Our primary server infrastructure is located within the European Economic Area (EEA). In the event that technical support services involve vendors situated outside the EEA, transfers occur solely under European Commission Standard Contractual Clauses (SCCs) or adequacy decisions, ensuring an equivalent level of privacy protection.

6. Data Retention Protocols

We retain personal data only for the timeframe required to accomplish the stated purpose:

• Contact Inquiries: Retained for 24 months following the resolution of your inquiry, after which records are purged from active mail servers.
• Server Security Logs: Automatically overwritten or deleted within 90 days.
• Cookie Consents: Stored locally in your browser storage for up to 365 days or until cleared by the user.

7. Your Statutory Rights (GDPR & CCPA)

Under European and relevant international data protection laws, you possess the following actionable rights:

• Right of Access: Obtain confirmation whether your personal data is processed and request copies of relevant files.
• Right to Rectification: Request correction of inaccurate or incomplete personal records.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where retention is no longer justified.
• Right to Restriction of Processing: Request temporary suspension of processing during disputes.
• Right to Data Portability: Receive your provided data in a structured, machine-readable format.
• Right to Object: Oppose processing based on our legitimate interests.

To exercise any of these rights, submit a written request to our Data Protection Officer at [email protected] with proof of identity. You also retain the right to lodge a formal complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) at www.aepd.es.

8. Revisions to this Policy

We may update this Privacy Policy periodically to reflect shifts in European digital governance or site architecture. Any modifications will be posted to this page accompanied by an updated effective date.