Privacy policies

01

Data Controller

In accordance with Article 13 of the General Data Protection Regulation (GDPR) and Organic Law 3/2018 of December 5 on the Protection of Personal Data and guarantee of digital rights, we inform you of the Data Controller’s details:

Owner
Luz Karime Posada
Activity
Training, mentoring, and consulting in business strategies and well-being — Detox for Success
Registered address
Madrid, Spain — ZIP Code 28039
Website
https://detoxforsuccess.com
02

Personal Data Collected

Data provided directly by the user

  • First and last name
  • Email address
  • Phone number (if applicable)
  • Payment data (fully processed by the payment gateway; not stored by the controller)
  • Any data voluntarily included in free-text form fields

Data collected automatically

  • IP address of the device used to access the website
  • Browser type and operating system
  • Pages visited, browsing time, and on-site behavior
  • Cookies and similar tracking technologies (see Cookie Policy)
Important: Under no circumstances are special categories of data processed (Article 9 GDPR), such as health data, ethnic origin, religion, or political ideology.
03

Purposes of Processing

The personal data collected is processed for the following purposes:

  • Manage and respond to inquiries, information requests, or contact requests submitted by the user.
  • Manage newsletter subscriptions and send informational communications about content and resources related to Detox for Success services.
  • Send commercial and promotional communications about programs, mentoring, courses, books, and other services offered, provided the user has given explicit consent.
  • Manage service contracting, formalize agreements, and process related payments.
  • Comply with applicable legal, accounting, and tax obligations.
  • Analyze user behavior in an aggregated and anonymous way for statistical purposes and service improvement.
  • Prevent fraudulent use and ensure the security of information systems.
04

Legal Basis for Processing

The processing of personal data is based on the following legal grounds under Article 6 GDPR:

Consent (Art. 6.1.a)
For sending commercial communications, newsletter subscriptions, and non-essential cookies. Can be withdrawn at any time.
Contract performance (Art. 6.1.b)
When the user contracts a service, processing is necessary to execute the contract.
Legal obligation (Art. 6.1.c)
To comply with tax and accounting obligations.
Legitimate interest (Art. 6.1.f)
For managing non-contractual inquiries and ensuring website security.
05

Recipients and Data Transfers

As a general rule, personal data will not be shared with third parties except in the following cases:

  • Legal obligation: when required by law, court order, or public authority request.
  • Data processors: service providers under contracts in accordance with Article 28 GDPR (email marketing platforms, hosting providers, payment gateways, videoconferencing platforms, analytics tools).
International transfers: If data is transferred outside the European Economic Area, appropriate safeguards will be applied in accordance with Article 46 GDPR, including standard contractual clauses approved by the European Commission.
06

Data Retention Period

Inquiries and contact
Until the inquiry is resolved and during the legal limitation period (generally 3 years).
Newsletter
While the subscription remains active. After unsubscribing, deletion within a maximum of 30 days.
Contractual relationship
During the contract term and legally required retention periods.
Cookies and browsing
As specified in the website’s Cookie Policy.

Once retention periods expire, data will be securely deleted or irreversibly anonymized.

07

User Rights

Under GDPR, you may exercise the following rights at any time:

Access — Art. 15 GDPR

Obtain confirmation of whether your data is being processed and access it.

Rectification — Art. 16 GDPR

Request correction of inaccurate or incomplete data.

Erasure ("Right to be forgotten") — Art. 17 GDPR

Request deletion of your data when no longer necessary.

Restriction — Art. 18 GDPR

Request limitation of processing under certain circumstances.

Portability — Art. 20 GDPR

Receive your data in a structured format and transfer it to another controller.

Objection — Art. 21 GDPR

Object to processing, including profiling and marketing communications.

Automated decisions — Art. 22 GDPR

Not be subject to decisions based solely on automated processing.

Withdrawal of consent

Withdraw consent at any time without affecting prior processing.

How to exercise your rights

You can exercise these rights by sending an email with a copy of your ID or equivalent document:

Recommended subject: "GDPR Rights Request — [Right exercised]"

The Controller will respond within a maximum period of one month from receipt.

Complaint with the supervisory authority

Spanish Data Protection Agency (AEPD): If you believe your data is not being processed in accordance with the law, you may file a complaint at www.aepd.es.
08

Minors

Services are intended exclusively for individuals over 18 years of age. No data from minors is knowingly collected without parental consent.

09

Security Measures

Appropriate technical and organizational measures are implemented to ensure data security:

  • HTTPS/SSL encryption across the website.
  • Access control systems.
  • Regular backups.
  • Periodic security audits.
  • Confidentiality agreements.
10

Cookie Policy

The website uses cookies to improve browsing experience.

11

Third-Party Links

The website may contain links to third-party sites. We are not responsible for their privacy policies.

12

Social Media

The Controller maintains presence on social media platforms. Data processing is subject to each platform’s policies.

13

Modifications

This Privacy Policy may be updated at any time.

14

Contact

For any inquiries, contact:

Website
https://detoxforsuccess.com
Location
Madrid, Spain
🇪🇸 Spanish version ¿Do you need help?
¡ Write to us!
WhatsApp