PRIVACY POLICY

1. Data Controller
Controller: Paprika Concept S.L.
CIF: B23981293
Registered address: C/Maudes 26 2-3 28003 Madrid
Contact email: hola@paprikaconcept.com

2. Data we process
Through the contact form, we may process, among others, the following data: name, email address, and message (and any other information the user voluntarily includes).

3. Purposes of processing
We process the data for the following purposes:

• To manage and respond to enquiries, requests, or messages received through the contact form.
• Where applicable, to manage any necessary communications arising from the user’s request.

4. Legal basis for processing
The legal basis for processing your data is:

• The user’s consent when submitting the contact form.
  Where the enquiry is related to requesting a service or a quotation, the processing may also be linked to the implementation of pre-contractual measures at the user’s request (where applicable).

5. Recipients
Data will not be disclosed to third parties, except where required by law.
Service providers necessary for the operation of the website and communications (for example, hosting, email, or technical maintenance) may access the data as data processors, under the corresponding confidentiality obligations and data processing terms in accordance with applicable regulations.

6. International data transfers
In general, no international data transfers are expected. If any provider delivers services from outside the European Economic Area, the appropriate safeguards required by applicable regulations will be adopted.

7. Data retention periods
Data will be retained:

• For as long as necessary to handle and manage the enquiry.
• Afterwards, for the periods necessary to address potential liabilities arising from the processing (where applicable).

8. Users’ rights
Users may exercise their rights of access, rectification, erasure, objection, restriction of processing, and data portability, and may also withdraw consent at any time (without affecting the lawfulness of processing carried out prior to withdrawal), by sending a request to [Email].

Likewise, if they consider that processing does not comply with applicable regulations, they may lodge a complaint with the Spanish Data Protection Agency (AEPD).

9. Changes to this policy
This policy may be updated to reflect regulatory changes or changes in the processing activities. Users are advised to review it periodically.