Maria Eugènia Rodríguez Serra

Privacy Policy

Last updated: 14 October 2026

1. Data controller

Data controller: Maria Eugenia Rodríguez Serra
Spanish tax identification number (NIF): 41518732Y
Address: C/ Manuel de Falla 7, 28492 Mataelpino, Madrid, Spain
Privacy contact email: jeni.rodriguez.serra@gmail.com

2. Personal data that may be processed

This website currently does not include its own registration form or newsletter subscription form.

Personal data may be processed when someone chooses to contact me through the channels available on the website, mainly email, WhatsApp or Calendly.

Depending on the channel used, this information may include name, surname, email address, telephone number, company, job title, information related to a requested meeting and any other information voluntarily provided in the communication.

The technical operation, maintenance and security of the website may also involve limited processing of technical information such as IP address, browser, device type, technical logs or similar information.

Special categories of personal data are not intentionally requested.

3. Purposes of processing

Personal data may be processed to:

  • Respond to enquiries and communications.
  • Manage contact requests.
  • Arrange meetings requested through Calendly.
  • Assess potential projects, professional services or collaborations.
  • Maintain communications related to those requests.
  • Take steps, where applicable, prior to entering into a potential professional relationship.
  • Maintain the security, integrity and proper functioning of the website.
  • Comply with applicable legal obligations.

Data obtained through these channels is not currently used to send newsletters or unsolicited recurring marketing communications.

4. Legal basis

When someone requests information about services, proposes a collaboration or requests a meeting in connection with a possible professional relationship, processing may be necessary in order to take steps at the request of the data subject prior to entering into a contract.

Other professional communications may be processed on the basis of legitimate interests in receiving and responding to professional enquiries, subject to the rights and interests of the person concerned.

Processing required by law will be carried out on the basis of compliance with the relevant legal obligation.

Technical information strictly necessary to maintain the security, integrity and operation of the website may be processed on the basis of legitimate interests in maintaining a secure and functioning service.

Where processing legally requires consent, consent will be requested specifically before such processing takes place.

5. Calendly

This website uses Calendly to allow interested people to request and book a meeting.

Calendly is loaded only when the visitor chooses to use the booking functionality.

When Calendly is used, information necessary to manage the booking may be processed through Calendly's services.

Use of Calendly is also subject to Calendly's own privacy and cookie-management mechanisms.

Calendly Privacy Notice

6. WhatsApp and other external services

If someone chooses to contact me through WhatsApp, LinkedIn or another external service, that provider may process information in accordance with its own terms and privacy policy.

Use of these services is voluntary.

People may alternatively contact me directly by email at: jeni.rodriguez.serra@gmail.com

7. Technology providers

Technology providers are used to host, maintain and deliver this website and may process technical information necessary to provide their services.

The website is currently built and hosted using Lovable services.

Where these providers act as processors or subprocessors, access to data will be limited to what is necessary to provide the relevant service.

Lovable Privacy Policy

8. International transfers

Some technology providers may be located or process data outside the European Economic Area.

Where an international transfer of personal data takes place, mechanisms recognised under applicable data-protection legislation must be used, such as adequacy decisions, the EU-US Data Privacy Framework where applicable, or Standard Contractual Clauses.

Third-party services used through this website are subject to their own international transfer mechanisms and safeguards.

9. Recipients of personal data

Personal information is not sold or disclosed to third parties for their own commercial purposes.

Technology providers may access information where necessary to provide their services.

Information may also be disclosed to public authorities where required by law or where necessary for the establishment, exercise or defence of legal claims.

10. Data retention

Personal information will be kept for as long as necessary to manage the enquiry, communication, meeting, project or potential professional relationship.

It may subsequently be retained, with access appropriately restricted, for periods required to comply with legal obligations or address possible liabilities.

When information is no longer necessary for the purposes for which it was collected and there is no legal obligation to retain it, it will be deleted.

11. Data protection rights

Where applicable, individuals may exercise their rights of:

  • Access
  • Rectification
  • Erasure
  • Objection
  • Restriction of processing
  • Data portability

Where processing is based on consent, consent may also be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

Requests may be sent to: jeni.rodriguez.serra@gmail.com

The request should contain sufficient information to identify the requester and the right they wish to exercise.

12. Complaints

Anyone who believes their personal information has not been processed correctly may lodge a complaint with the Spanish Data Protection Agency (AEPD).

Spanish Data Protection Agency

13. Security

Reasonable technical and organisational measures will be used to protect personal information from loss, unauthorised access, alteration, disclosure or destruction.

However, no internet-connected system can guarantee absolute security.

14. Future forms and features

If a proprietary contact form, lead-generation functionality, newsletter, analytics platform or other feature involving new processing purposes is introduced in the future, this Privacy Policy and any required information or consent mechanisms must be updated before that feature is activated.

15. Changes to this policy

This Privacy Policy may be updated when website functionality, service providers or applicable legislation changes.

The version published on this page will be the current version.