Website Privacy Policy

In compliance with current legislation, Atiza Design (hereinafter also referred to as the Website) undertakes to adopt the necessary technical and organizational measures, according to the appropriate level of security, to protect the personal data collected.

Laws incorporated into this privacy policy
This privacy policy is adapted to current Spanish and European regulations on the protection of personal data on the internet. Specifically, it complies with the following:

• Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and the free movement of such data (GDPR).

• Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).

• Royal Decree 1720/2007, of 21 December, approving the Regulation implementing Organic Law 15/1999, of 13 December, on the Protection of Personal Data (RDLOPD).

• Law 34/2002, of 11 July, on Services of the Information Society and Electronic Commerce (LSSI-CE).

Identity of the data controller
The controller of the personal data collected on Atiza Design is: Anna Guix, with NIF: (hereinafter, the Data Controller).

Contact details:

• Address:

• Contact phone number:

• Contact email: atizastudio@gmail.com

Registration of personal data
In compliance with the GDPR and the LOPD-GDD, we inform you that the personal data collected by Atiza Design through the forms on its pages will be incorporated into our database and processed for the purpose of facilitating, expediting, and fulfilling the commitments established between Atiza Design and the User, or maintaining the relationship established in the forms filled out, or to address a request or inquiry.

Furthermore, in accordance with the GDPR and the LOPD-GDD, unless the exception of Article 30.5 of the GDPR applies, a record of processing activities is maintained, specifying, according to their purposes, the processing activities carried out and other circumstances established in the GDPR.

Principles applicable to the processing of personal data
The processing of User data will be subject to the following principles as set forth in Article 5 of the GDPR and Articles 4 and subsequent of Organic Law 3/2018:

• Lawfulness, fairness, and transparency: User consent will always be required with full transparency about the purposes of the data collection.

• Purpose limitation: Data will only be collected for specific, explicit, and legitimate purposes.

• Data minimization: Only data strictly necessary for the stated purposes will be collected.

• Accuracy: Data must be accurate and kept up to date.

• Storage limitation: Data will be kept only for as long as necessary for the purposes of processing.

• Integrity and confidentiality: Data will be processed in a way that ensures their security and confidentiality.

• Accountability: The Data Controller will be responsible for ensuring compliance with these principles.

Categories of personal data
The categories of data processed by Atiza Design are solely identifying data. No special categories of personal data, as defined in Article 9 of the GDPR, are processed.

Legal basis for processing
The legal basis for processing personal data is consent. Atiza Design undertakes to obtain the express and verifiable consent of the User for the processing of their personal data for one or more specific purposes.

The User has the right to withdraw consent at any time, as easily as it was given. Withdrawal of consent will not condition the use of the Website.

Purposes of processing
Personal data is collected and managed by Atiza Design for the purpose of facilitating, expediting, and fulfilling the commitments established between the Website and the User, or to maintain the relationship expressed in forms or to respond to requests and inquiries.

Additionally, the data may be used for commercial purposes such as personalization, operations, statistics, activities related to Atiza Design’s business purpose, as well as data storage and marketing studies to tailor the content offered to the User, and to improve the quality, operation, and browsing of the Website.

Retention periods
Personal data will only be retained for the minimum time necessary for processing purposes, and in any case, no longer than 5 years, or until the User requests its deletion.

Recipients of personal data
User data will not be shared with third parties.

Data of minors
Only those over 14 years of age may lawfully give consent for their personal data to be processed by Atiza Design. For children under 14, parental or guardian consent is required.

Confidentiality and security
Atiza Design undertakes to adopt the necessary technical and organizational measures to guarantee the security and confidentiality of personal data, preventing accidental or unlawful destruction, loss, alteration, or unauthorized access.

However, since absolute security on the internet cannot be guaranteed, in the event of a data breach that poses a high risk to Users’ rights and freedoms, the Data Controller will notify the User without undue delay.

User rights
Users may exercise the following rights under the GDPR and Organic Law 3/2018:

• Right of access

• Right to rectification

• Right to erasure ("right to be forgotten")

• Right to restriction of processing

• Right to data portability

• Right to object

• Right not to be subject to automated decision-making, including profiling

Requests should include identification details (name, surname, ID copy), reasons for the request, address for notifications, date, and signature.

Requests may be sent to:

• Postal address:

• Email: atizastudio@gmail.com

Links to third-party websites
The Website may contain links to third-party websites not operated by Atiza Design. These third parties will be responsible for their own privacy policies and practices.

Complaints to supervisory authorities
If the User believes that their data rights are being violated, they may file a complaint with the supervisory authority in their country of residence, workplace, or where the alleged infringement occurred. In Spain, the supervisory authority is the Spanish Data Protection Agency (AEPD): https://www.aepd.es/