WEBSITE PRIVACY POLICY
https://aurorastart.eu
I. PRIVACY AND DATA PROTECTION POLICY
In compliance with current legislation, the marketing and web development company (hereinafter also referred to as the Website) undertakes to adopt the necessary technical and organizational measures, according to the appropriate level of security for the risk of the data collected.
Laws incorporated into this Privacy Policy
This Privacy Policy is adapted to the current Spanish and European regulations on the protection of personal data on the internet. Specifically, it complies with the following regulations:
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD-GDD).
Royal Decree 1720/2007 of 21 December, approving the implementing regulation of Organic Law 15/1999 on the Protection of Personal Data (RDLOPD).
Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).
Identity of the Data Controller
The Data Controller responsible for the processing of personal data collected by the marketing and web development company is Gastón Valentini, with Tax ID (NIF): X5315510A (hereinafter, the Data Controller). Contact details are as follows:
Address: Calle Cornellana 1, 4ºC, 03502, Benidorm, Alicante
Contact telephone: +34 865 86 10 03
Fax: —
Contact email: contacto@aurorastart.es
Personal Data Records
In accordance with the GDPR and the LOPD-GDD, personal data collected through forms on the Website will be incorporated into and processed in our records in order to facilitate, streamline, and fulfill the commitments established between the Website and the User, to maintain the relationship established through the forms, or to respond to a request or inquiry. Likewise, unless the exception provided in Article 30.5 of the GDPR applies, a record of processing activities is maintained in accordance with the GDPR.
Principles Applicable to the Processing of Personal Data
The processing of personal data shall comply with the principles set out in Article 5 of the GDPR and Article 4 et seq. of Organic Law 3/2018:
Lawfulness, fairness, and transparency: the User’s consent will be required, with transparent information about the purposes of data collection.
Purpose limitation: data will be collected for specific, explicit, and legitimate purposes.
Data minimization: only strictly necessary data will be collected.
Accuracy: data must be accurate and kept up to date.
Storage limitation: data will be retained only as long as necessary for the purposes of processing.
Integrity and confidentiality: data will be processed securely and confidentially.
Accountability: the Data Controller is responsible for compliance with these principles.
Categories of Personal Data
The categories of data processed are identification data only. Special categories of personal data as defined in Article 9 of the GDPR are not processed.
Where special categories of personal data are processed (data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, health data, or data concerning sexual life or orientation), explicit consent will be required for one or more specific purposes.
Legal Basis for Processing
The legal basis for processing personal data is consent. The marketing and web development company undertakes to obtain explicit and verifiable consent from the User for one or more specific purposes. Consent may be withdrawn at any time, as easily as it was given, without affecting the use of the Website.
Purposes of Processing
Personal data are collected and managed to facilitate, streamline, and fulfill commitments between the Website and the User, to maintain relationships established via forms, or to respond to requests or inquiries.
Data may also be used for commercial, personalization, operational, and statistical purposes, as well as marketing studies to adapt content to the User and improve the quality, operation, and navigation of the Website.
Data Retention Periods
Personal data will be retained only for the minimum time necessary and, in any case, for 2 years, or until the User requests deletion.
Recipients of Personal Data
Personal data will not be shared with third parties, except where necessary. Recipients may include:
Gastón Valentini (Spain)
Meta Platforms Ireland Ltd. (Ireland)
Google Ireland Ltd. (Ireland)
Grupo Loading Systems, S.L. (Spain – hosting/infrastructure)
Stripe Payments Europe Ltd. (Ireland – payments)
The Rocket Science Group LLC (Mailchimp, USA – email marketing)
HubSpot Spain, S.L. (Spain – CRM)
HOLDED TECHNOLOGIES SL (Spain – CRM/ERP)
Where data transfers to third countries occur, Users will be informed accordingly.
Personal Data of Minors
Only individuals over 14 years of age may lawfully consent to data processing. For minors under 14, parental or guardian consent is required.
Data Security and Confidentiality
Appropriate technical and organizational measures are implemented to ensure data security. The Website uses an SSL certificate to ensure encrypted transmission of data.
In the event of a personal data breach likely to result in a high risk to individuals’ rights and freedoms, the User will be informed without undue delay.
User Rights
Users may exercise the following rights under the GDPR and LOPD-GDD:
Right of access
Right to rectification
Right to erasure (“right to be forgotten”)
Right to restriction of processing
Right to data portability
Right to object
Right not to be subject to automated decision-making, including profiling
Requests must be submitted in writing to the Data Controller with the reference “GDPR – https://aurorastart.eu”, including identification details and supporting documentation.
Contact details for exercising rights:
Postal address: Calle Cornellana 1, 4ºC, 03502, Benidorm, Alicante
Email: contacto@aurorastart.es
Third-Party Links
The Website may contain links to third-party websites. These sites have their own privacy policies and are responsible for their own data processing practices.
Complaints to the Supervisory Authority
If the User believes that their rights have been infringed, they may file a complaint with the competent supervisory authority. In Spain, this is the Spanish Data Protection Agency (AEPD): https://www.aepd.es/
II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY
Use of the Website implies acceptance of this Privacy Policy. The marketing and web development company reserves the right to modify this policy due to legislative or regulatory changes. Users are advised to review this page periodically.
This Privacy Policy was updated on 06/01/2026 to comply with GDPR and Organic Law 3/2018.