Privacy policy

1. Data controller

The controller of the personal data processed through this website is:

  • Owner: Ignacio Sanz Arana
  • Tax ID (NIF): 72752567W
  • Address: Pintor Pablo Uranga 12, 01008 Vitoria-Gasteiz (Álava), Spain
  • Email: ignacio@musubigara.org

This policy complies with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). No data protection officer has been appointed.

2. What data we process and why

Contact form

  • Data: name, email address, type of enquiry and the content of your message.
  • Purpose: to deal with your enquiry and reply to you.
  • Legal basis: your consent when you submit the form (Article 6(1)(a) GDPR) and, if you request a service, the application of pre-contractual measures at your request (Article 6(1)(b) GDPR).

Email, phone and WhatsApp

  • Data: what you give us when you write or call (name, email or phone number, and the content of your message).
  • Purpose and legal basis: the same as for the form. You contact us on your own initiative.

Call scheduling (Calendly)

  • Data: name, email address and the appointment details you enter when booking.
  • Purpose and legal basis: to manage the call you request (Article 6(1)(a) and (b) GDPR).

3. Retention period

We keep your data for as long as necessary to deal with your enquiry or manage the service you request. After that, we keep it blocked for the legal limitation periods for possible liabilities and delete it once they have passed.

4. Recipients and providers

We do not sell your data or pass it on to third parties, except where required by law. To provide the service we rely on these providers:

  • Netlify, Inc.: website hosting and receipt of form messages.
  • Calendly, LLC: call booking, only if you use the scheduler.
  • WhatsApp (Meta Platforms): messaging, only if you write to us through that channel.
  • Google (Google Fonts): the website's typefaces.

5. International transfers

Some of these providers are based in the United States. Data transfers rely on the safeguards each provider states in its privacy policy, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

6. Cookies and similar technologies

This website does not use its own or third-party cookies for analytics, personalisation or advertising purposes. When the page loads, your browser requests the typefaces from Google Fonts, so Google may receive your IP address and basic technical data about your browser. If cookies or analytics tools are added in the future, this policy will be updated and your consent will be requested where required.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to ignacio@musubigara.org and stating the right you wish to exercise. To protect your data, we may ask you to verify your identity.

If you believe your data has not been processed properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es).

8. Security

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration.

9. Changes to this policy

We may update this policy to adapt it to changes in the law or in the website. The current version is the one published on this page.

Last updated: 24 September 2026.