This policy explains how we collect, store, process and protect your personal data when you use the website, and the rights you can exercise.
Ángel López Fernández ensures that personal data is processed lawfully, fairly and transparently, and that you retain control over it.
This policy has been prepared in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Controller identity and contact
- Data controller: Ángel López Fernández
- Trading name: Gorilangel
- Tax ID (NIF): 51144862S
- Address: Calle Travesía de Ronda, 6, Madrid, Spain
- Email: asesorias@gorilangel.com
2. Collection of personal data
We may collect personal data in the following ways:
- When you contact us by email or through a form.
- Through local storage and similar technologies, as described in the Cookie Policy.
- Automatically through server logs, which may include the requested URL, date and time, browser, device and IP address.
- Through third-party appointment and assessment call services, such as Calendly, when you make a booking.
- If you accept, through Cloudflare Web Analytics, which analyses traffic without cookies and may process the visited URL, referring page, country, device and browser.
3. Purposes of processing
- Managing information requests and contact with users.
- Analysing website use and improving the experience, provided the user has accepted analytics.
- Understanding browsing patterns and optimizing website performance.
- Ensuring the correct operation and security of the website.
4. Legal basis for processing
- Legitimate interests (Article 6(1)(f) GDPR): managing contact with users, ensuring website security and preventing unlawful computer activities.
- Consent (Article 6(1)(a) GDPR): enabling Cloudflare Web Analytics. The tool does not load if the user rejects it.
5. Categories of data
Processing may include special categories of data when a user provides information about their health, physical condition or injuries to receive a more personalized plan. In these cases, the data is processed with the individual's explicit consent.
- Identification data: first name and, where applicable, surname.
- Contact data: email address and, where applicable, telephone number.
- Connection data: IP address, date and time, browser, device and other browsing metadata.
6. Data relating to minors
Services are not directed at minors, and we do not intentionally collect information from children under 14. If a parent, guardian or legal representative believes a child has provided data without consent, they should contact us using the address in section 1.
7. Data recipients
We will not disclose data to third parties except where legally required. When using service providers acting as processors, we will select only those offering sufficient guarantees of GDPR compliance.
External appointment or communication services, such as Calendly, process the necessary data in accordance with their own terms and the safeguards required by law.
8. International transfers
As a general rule, international transfers outside the European Economic Area are not envisaged. Cloudflare Web Analytics may process data on servers in the United States or other countries after the user accepts, with the corresponding data protection safeguards. See the Cookie Policy for more information.
9. Data retention
We retain personal data for as long as necessary to fulfil the purposes for which it was collected and for the applicable statutory limitation periods. Where consent is the basis, data is retained until consent is withdrawn or deletion is requested, subject to legal obligations.
10. Your rights
You may exercise the following rights at any time:
- Access: confirm whether we process your data and obtain a copy.
- Rectification: correct inaccurate data or complete incomplete data.
- Erasure: request deletion where the legal requirements are met.
- Portability: receive data in a structured format and transfer it to another controller.
- Restriction: restrict processing in the circumstances established by law.
- Objection: object to processing based on legitimate interests.
- Withdrawal of consent: withdraw consent as easily as it was given.
You can exercise these rights by email or in writing using the contact details in section 1. You may also lodge a complaint with the Spanish Data Protection Agency.
11. Security measures
The controller applies technical and organizational measures appropriate to the risk to reduce loss, misuse, alteration, unauthorized access or disclosure of personal data, including:
- Strong passwords for equipment and applications.
- Protection against malicious software.
- Confidentiality agreements with providers.
- Security measures for the platform and hosting provider.
- Encrypted communications using HTTPS.
12. Changes to this policy
This policy may be updated when processing circumstances change. We will communicate significant changes that may affect data subjects' rights or interests.
For questions, please contact us using the details in section 1.