Privacy Policy

Last Updated: August 28, 2025

Welcome to Andrea Camargo Vassaux. Your privacy and the protection of your personal data are very important to us. This policy clearly explains how we collect, use, and protect your data, as well as your rights under the General Data Protection Regulation (GDPR).

​

1. Data Controller

Name: Andrea Camargo Vassaux
Email: info@andreacamargo.es

​

2. Data We Collect and How We Process It

2.1. Contact Information (Emails and Names)

What we collect:

• Full name

• Email

Purpose:

• Sending newsletters and promotions

• Free downloads (lead magnets)

Legal basis:

• Explicit consent (Art. 6.1.a GDPR)

Retention period:

• Until consent is withdrawn

Recipients:

• GDPR-compliant email marketing providers (Mailchimp, Sendinblue, etc.)

2.2. Financial Information (Credit Cards)

What we collect:

• Card number, cardholder name, expiration date, and security code (if applicable)

Purpose:

• Process payments for courses, workshops, and services

Legal basis:

• Contract execution (Art. 6.1.b GDPR)

• Compliance with legal obligations (Art. 6.1.c GDPR)

Retention period:

• Payment data stored according to tax obligations (minimum 6 years)

Recipients:

• Certified, GDPR-compliant payment service providers

2.3. Tracking Cookies

What we collect:

• Analytics, functionality, and advertising cookies

Purpose:

• Improve your website experience

• Analyze website usage

• Personalize content and advertising

Legal basis:

• Prior explicit consent (ePrivacy Directive and Art. 6.1.a GDPR)

Retention period:

• Depending on the purpose of each cookie (6 months to 2 years)

Recipients:

• Analytics and advertising services (Google Analytics, Facebook Pixel, etc.)

2.4. Contact Forms

What we collect:

• Name, email, and message

Purpose:

• Respond to inquiries, information requests, or appointment scheduling

Legal basis:

• Explicit consent or legitimate interest (Art. 6.1.a and 6.1.f GDPR)

Retention period:

• Until the inquiry is resolved or deletion is requested

Recipients:

• Authorized company personnel

2.5. Purchase and Service History

What we collect:

• Records of courses, workshops, and services purchased

Purpose:

• Contract and billing management

• Internal analysis to improve services

Legal basis:

• Contract execution (Art. 6.1.b GDPR)

• Legitimate interest for internal analysis (Art. 6.1.f GDPR)

Retention period:

• Minimum 6 years for tax obligations

Recipients:

• Internal accounting and billing providers

2.6. Sensitive Mental Health Data

What we collect:

• Clinical and personal information related to psychology or coaching services

Purpose:

• Provide personalized psychology and coaching services

Legal basis:

• Explicit consent (Art. 9.2.a GDPR)

Retention period:

• During the service and as long as necessary for legal or clinical reasons

Recipients:

• Authorized clinical personnel only

• No third parties without consent

Minors under 16:

• Parental consent required

3. International Transfers

If your data is transferred outside the European Economic Area, we ensure adequate protective measures, such as standard contractual clauses approved by the European Commission.

 

4. Your Rights

You have the right to:

• Access your data

• Correct inaccurate data

• Delete data

• Restrict or object to processing

• Data portability

To exercise these rights, contact: info@andreacamargo.es
You can also lodge a complaint with the competent supervisory authority (e.g., Spanish Data Protection Agency).

 

5. Security Measures

We implement technical and organizational measures to protect your data against unauthorized access, loss, alteration, or disclosure.

 

6. Changes to This Policy

We reserve the right to modify this policy. The updated version will be published on this page with the date of the latest update.