PRIVACY POLICY

Who is responsible for processing your data?

ROCIO ALVARIÑO ORELLANA

Calle Arroyo Bueno 4, 28021. Madrid.

Email: hi@moitaz.com


We reserve the right to modify or adapt this Privacy Policy at any time. We recommend reviewing it periodically.


1. INFORMATION ABOUT THE USE OF COOKIES AND THIRD-PARTY TOOLS

Do we use cookies?

The Moitaz website (www.moitaz.com) and its subdomains use cookies. Accessing and browsing the website implies acceptance of these conditions.

Types of cookies used:

  • Technical and functional cookies: Necessary for the website's operation.

  • Analytical cookies: Used by Google Analytics and Ahrefs to measure traffic and user behavior.

  • Advertising and remarketing cookies: Used by Pinterest and Framer to personalize ads and content.

You can manage or reject cookies through your browser settings or via the website’s cookie configuration panel.


2. ANALYTICS AND ADVERTISING TOOLS USED

We use third-party tools that may collect information about your browsing activity:

  • Google Analytics: Collects website usage data anonymously (IP anonymization enabled). See its privacy policy.

  • Ahrefs: SEO analysis tool. See its privacy policy.

  • Pinterest and Framer: Collect interaction data with advertising content. See their policies at Pinterest and Framer.

  • Hostalia: Hosting provider that stores data on its servers. See its privacy policy.


3. INTERNATIONAL DATA TRANSFERS

Using tools such as Google Analytics, Pinterest, or Ahrefs may involve data transfers outside the European Economic Area (EEA). In such cases:

  • Standard Contractual Clauses of the European Commission apply.

  • Google and Pinterest comply with the EU-U.S. Data Privacy Framework.

  • You can check their protection mechanisms in their respective privacy policies.


4. SECURITY AND PROTECTION MEASURES

We have adopted appropriate technical and organizational measures to ensure the security of personal data, including:

  • Data encryption in transit and storage.

  • Restricted access control to information.

  • Regular security audits.

  • Protection against malware and advanced cybersecurity threats.


5. DATA RETENTION PERIODS

  • Contact form data: Retained until the request is processed, up to a maximum of 12 months.

  • Customer data: Retained for up to 5 years after the contractual relationship ends, in compliance with tax obligations.

  • Google Analytics data: Retained for a maximum of 26 months.

  • Job applicant CVs: Retained for 1 year unless earlier deletion is requested.

  • Social media data: Retained as per the user’s settings on the respective platform.


6. EXERCISING YOUR RIGHTS

You have the right to:

  • Access your personal data.

  • Rectify incorrect or incomplete data.

  • Request deletion of your data when it is no longer needed.

  • Object to processing in certain cases.

  • Request data portability in a structured format.

To exercise these rights, send an email to hi@moitaz.com with your request and a copy of your identification document.

If you believe we have not handled your rights correctly, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es).


USE CASES

WEBSITE OR EMAIL COMUNICATIONS

What data do we collect through the Website?

We may process your IP address, the operating system or browser you use, and even the duration of your visit, anonymously.
If you provide us with data through the contact form, you will be identified so we can contact you if necessary.


For what purposes will we process your personal data?

  • To respond to your inquiries or requests.

  • To manage the requested service, respond to your request, or process your petition.

  • To provide information via electronic means regarding your request.

  • To send commercial or event-related information via electronic means.

  • To conduct analysis and improvements on the Website, our products, and services.

  • To enhance our commercial strategy.


What is the legal basis for processing your data?

Acceptance and consent by the data subject: In cases where completing a form is required to make a request and clicking the "submit" button is necessary, it implies that you have been informed and have expressly given your consent to the clause attached to the form or the acceptance of the privacy policy. All our forms include the * symbol for mandatory fields. If you do not provide these fields or do not check the acceptance box, the request will not be sent.


The standard acceptance statement is: "I am over 14 years old and have read and accept the Privacy Policy."


How long will we keep personal data?

Until the consent given is revoked.


CLIENTS

For what purposes will we process your personal data?

  • Preparing quotations.

  • Providing information via electronic means regarding your request.

  • Managing administrative, communication, and logistics services carried out by the Data Controller.

  • Invoicing and tax declaration.

  • Carrying out the corresponding transactions.

  • Control and collection management.


What is the legal basis for processing your data?

The existence of a contractual relationship between the parties. Processing is necessary for the execution of a contract in which the data subject is a party or for the application of pre-contractual measures at the data subject’s request.


How long will we keep personal data?

Until the consent given is revoked.


QUALITY SURVEYS

For what purposes will we process your personal data?

To assess the quality of the service provided.


What is the legal basis for processing your data?

The legal basis is the explicit consent of the respondent.


How long will we keep personal data?

Until the consent given is revoked.


SUPPLIERS & PRESS

What data do we process as a supplier?

  • Information via electronic means regarding your request.

  • Commercial or event-related information via electronic means, only with express authorization.

  • Managing administrative, communication, and logistics services carried out by the Data Controller.

  • Invoicing.

  • Carrying out the corresponding transactions.

  • Invoicing and tax declaration.

  • Control and collection management.


What is the legal basis for processing your data?

The legal basis is the acceptance of a contractual relationship or, alternatively, your consent when contacting us or offering your products via any means.


How long will we keep personal data?

Until the consent given is revoked.


SOCIAL MEDIA CONTACTS

Why do we use social media data?

  • To respond to your inquiries or requests.

  • To manage the requested service.

  • To interact with you and build a community of followers.


What is the legal basis for processing your data?

The legal basis is the voluntary consent of the data subject to contact us and, where applicable, the acceptance of a contractual relationship within the relevant social media environment. Data processing within the social network will be carried out following its privacy policies.


How long will we keep personal data?

We can only access or delete your data in a restricted manner since we have a specific profile. We will process your data for as long as you allow us by following us, being friends, or using “like,” “follow,” or similar buttons. Any changes to your data or restrictions on information or posts must be managed through your profile settings on the respective social network.


JOB APPLICANTS

Why do we use your CV data?

  • To organize selection processes.

  • To invite you to job interviews and evaluate your application.

  • If you have given your consent, we may share your data with partner companies to help you find employment.

  • By checking the acceptance box of the privacy policy, you grant us consent to share your job application with companies within our business group for inclusion in their selection processes.

  • After one year from the receipt of your CV, we will securely delete it.


What is the legal basis for processing your data?

Acceptance and consent by the data subject: In cases where completing a form is required to make a request and clicking the "submit" button is necessary, it implies that you have been informed and have expressly given your consent to the clause attached to the form or the acceptance of the privacy policy.


All our forms include the * symbol for mandatory fields. If you do not provide these fields or do not check the acceptance box, the request will not be sent.


The standard acceptance statement is: "I am over 14 years old and have read and accept the Privacy Policy." The legal basis is your unequivocal consent when submitting your CV.


How long will we keep personal data?

For the duration of the relationship between the parties and for the applicable legal prescription periods.

  • We will keep CV data for at least 1 year or until consent is revoked.

Do we process third-party personal data?

No, as a general rule, we only process data provided by the owners themselves. If you provide third-party data, you must inform and obtain their prior consent; otherwise, you release us from any responsibility for non-compliance with this requirement.

What about data of minors?

We do not process data of minors under 14 years old. Therefore, please refrain from providing such data if you do not meet this age requirement or from sharing data of third parties who do not meet this requirement.
MOITAZ ALVARIÑO is exempt from any liability for non-compliance with this provision.

Will we communicate via electronic means?

  • Communications will only be made to manage your request.

  • Commercial communications will only be sent if you have previously and explicitly authorized them.

What security measures do we apply?

Rest assured, we have adopted an optimal level of protection for the Personal Data we handle and have installed all available technical and organizational measures according to current technology to prevent the loss, misuse, alteration, unauthorized access, and theft of Personal Data.


To whom will your data be disclosed?

Your data will not be shared with third parties except for legal obligations. Specifically, they will be shared with:\n- The Spanish Tax Agency, banks, and financial entities for service or product payments.

  • Data processors necessary for executing the agreement.

If necessary, our website developers, maintenance service providers, and hosting providers will have access to our website. They will have signed a service provision contract that obliges them to maintain the same level of privacy as we do.


For any modifications or to exercise these rights, please contact us at hi@moitaz.com


This privacy policy was last updated on 7th February 2025