top of page has established a policy to protect individual rights, especially in relation to automated processing, and with the intention of being transparent with the User. This policy outlines the various processing activities, their purposes, the legitimacy of such activities, and the tools available to the User to exercise their rights.

By navigating this website, you fully accept the following provisions and terms of use. The use of cookies will be accepted. If you do not agree, please send an email to

The updated version of this privacy policy is the only applicable version for the duration of website usage until a new version supersedes it.

For additional information on personal data protection, we invite you to consult the website of the Spanish Data Protection Agency (AEPD) at

Data Collection

Your data is collected by the CONTROLLER. Personal data refers to any information related to an identified or identifiable natural person (data subject). An identifiable person is one who can be identified, directly or indirectly, particularly by reference to a name, an identification number (DNI, NIF, NIE, passport), or one or more specific elements specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

The data generally collected includes: Name and surname, address, email address, phone number, date of birth, and payment-related information. Other types of data may also be collected with the User's informed consent.

Purpose of Personal Data Processing

The purpose of processing the collected personal data is mainly for the CONTROLLER to manage its relationship with you, offer products and services according to your interests, enhance your user experience, and, if applicable, process your requests or orders. A commercial profile will be created based on the provided information. No automated decisions will be made based on this profile.

Provided data will be retained for the duration of the business relationship or as long as necessary to fulfill legal obligations.

The data will be recorded in the customer file, and its processing will be registered in the treatment registry maintained by the CONTROLLER (before May 25, 2018, it could also be included in the file created with the personal data registered in the Spanish Data Protection Agency or the competent authority of the respective Autonomous Community).

Legal Basis for Data Processing

The legal basis for processing your personal data includes:

  • The proper execution or fulfillment of the contract

  • The legitimate interest of the CONTROLLER

  • The user's or customer's consent for data processing

Recipients of Data Communication

The User's personal data may be communicated to third parties related to the CONTROLLER by contract for tasks necessary for the management of the user's account as a customer, without requiring authorization. Also, data may be communicated to authorities in case of User actions contrary to the law or non-compliance with legal notices.

User data may be communicated to other companies within the group for internal administrative purposes that may involve data processing.

The User's personal data may be transferred to a third country or international organization, but the User will be informed of such transfers, their conditions, and the recipient.

When certain data are mandatory to access specific functionalities of the website, the CONTROLLER will indicate their obligatory nature at the time of data collection.


During the first navigation, an explanatory banner about the use of cookies will appear, including the option to accept all cookies or only technical cookies essential for the platform's operation, excluding analytical and advertising cookies. For more information, please refer to our cookie policy.

User Rights

Users are informed of their right to exercise access, rectification, cancellation, and opposition. Each individual also has the right to limit processing related to their person, the right to request the deletion of personal data transmitted to the data controller, and the right to data portability.

Users can file a complaint with the Spanish Data Protection Agency or the competent authority of the respective Autonomous Community if they are not satisfied with the exercise of their rights.

Unless the User objects by sending an email to the address, their data may be used, if applicable, for sending commercial information from Aitor Castillo.

Provided data will be retained for the duration of the business relationship or for the years necessary to fulfill legal obligations.

The User is responsible for ensuring that the information provided through this website is accurate, and they will be held accountable for the accuracy of all communicated data. The User should keep this information updated to reflect real circumstances and will be responsible for false or inaccurate information provided, as well as any damage, inconvenience, or problems caused to Aitor Castillo or third parties.

This information will be stored and managed confidentially, with the necessary IT security measures to prevent unauthorized access, use, manipulation, deterioration, or loss. However, the User should be aware that the security of computer systems is never absolute. When personal data are provided online, such information may be collected and processed by unauthorized third parties without consent. Aitor Castillo disclaims any responsibility for the consequences of such acts if the User voluntarily published the information.

Users can access and exercise these rights by submitting a written and signed request to the address Labastida Bajo 7, Vitoria-Gasteiz, 01015, Álava, Spain, attaching a copy of their ID card or equivalent document. The request can also be sent to the email address

For your information, the Data Protection Officer is Aitor Castillo.

These rights will be addressed within 1 month, which may be extended to 2 months if the complexity of the request or the number of received requests requires it. All this without prejudice to the duty to retain certain data under legal terms and until any potential liabilities resulting from possible processing or contractual relationships expire. In addition to the above, and in accordance with data protection regulations, users who request it have the possibility to arrange the fate of their data after their death.

bottom of page