1. An overview of data protection

General information

The following information provides a clear overview of what happens to your personal data when you visit this website. Personal data refers to any information that can be used to personally identify you.

This Privacy Policy explains which data we collect, how we use it, and for what purpose, in accordance with the General Data Protection Regulation (GDPR).

 

Data recording on this website

Who is the responsible party (“controller”)?

The controller responsible for data processing on this website within the meaning of the GDPR is:

Maria Clara Castaneda
Sole proprietor (Eenmanszaak)
PO Box 40
1399 ZG Muiderberg
The Netherlands

E-mail: info@mariaclaracastaneda.com

​

How do we collect your data?

Some data is collected when you provide it to us directly, for example when you contact us via a contact form or by e-mail.

Other data is collected automatically by our IT systems when you visit the website. This data includes technical information such as browser type, operating system, and time of access. This information is collected automatically to ensure the proper functioning and security of the website.

​

What do we use your data for?

• To ensure the secure and error-free provision of the website

• To respond to inquiries and communication requests

• To fulfill contractual or pre-contractual obligations where applicable

No automated decision-making or profiling takes place.

​

Your rights regarding your data

You have the right to:

• Access your stored personal data

• Request correction or deletion of your data

• Request restriction of processing

• Object to processing under certain circumstances

• Request data portability

You may exercise these rights at any time by contacting us using the contact details listed above.

You also have the right to lodge a complaint with the competent supervisory authority.

​

2. Supervisory authority

The competent data protection supervisory authority in the Netherlands is:

Autoriteit Persoonsgegevens
https://www.autoriteitpersoonsgegevens.nl

​

3. Security of data transmission

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries submitted via the website. An encrypted connection can be recognized by the “https://” prefix and the lock symbol in the browser address bar.

​

4. Cookies

This website uses cookies. Cookies are small text files stored on your device that help make the website more secure and user-friendly.

• Session cookies are automatically deleted when you leave the site

• Other cookies remain stored on your device until you delete them

You can configure your browser to notify you about cookies, allow cookies only in specific cases, or disable cookies entirely. Disabling cookies may limit the functionality of this website.

Cookies that are strictly necessary for the technical operation of the website are processed on the basis of Art. 6(1)(f) GDPR (legitimate interest). 

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law (e.g., accounting records). When your personal data is no longer required, it will be securely deleted.

This website uses only technically necessary cookies required for operation and security. No marketing or tracking cookies are used without explicit user consent.

​

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law (e.g., accounting records). When your personal data is no longer required, it will be securely deleted.

​​

5. Server log files

The website provider automatically collects and stores information in server log files, which may include:

• Browser type and version

• Operating system

• Referrer URL

• Host name

• Time of server request

• IP address

This data is not merged with other data sources and is processed on the basis of Art. 6(1)(f) GDPR to ensure technical stability and security.

The processing of personal data is based on one or more of the following lawful grounds under Article 6 of the GDPR:

• Consent (for example, when you contact me via email or a contact form)  
• Performance of a contract or pre-contractual measures  
• Legitimate interest (such as ensuring the security and proper functioning of this website)

5a. Lawful basis for processing.

The processing of data is based on lawful grounds: consent, contract, and legitimate interest.

​

 

6. Contact by e-mail or contact form

If you contact us by e-mail or via a contact form, your information will be stored for the purpose of processing your request.

The processing of this data is based on:

• Art. 6(1)(a) GDPR (consent), or

• Art. 6(1)(b) GDPR (pre-contractual or contractual communication)

Your data will be deleted once your request has been fully processed, unless statutory retention obligations apply.

​

International data transfers  
Personal data may be processed by service providers located outside the European Economic Area (EEA). In such cases, appropriate safeguards are applied, such as standard contractual clauses approved by the European Commission, to ensure an adequate level of data protection. Data may be processed outside EEA with adequate safeguards.

 

7. Social media and embedded content

YouTube

This website may use embedded YouTube videos. When you play a video, a connection to YouTube servers may be established. If you are logged into your YouTube account, YouTube may associate your visit with your user profile.

For more information, please consult YouTube’s Privacy Policy:
https://policies.google.com/privacy

This website uses only technically necessary cookies required for its operation and security. No marketing or tracking cookies are used without explicit user consent.

​

8. Fonts

This website uses fonts to ensure a consistent and visually coherent presentation. No personal data is transferred to third parties through font loading.

 

9. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy to ensure ongoing compliance with legal requirements or to reflect changes to the website or services.