This policy explains how SheWins handles your personal data when you use www.shewins.es, in line with the General Data Protection Regulation (GDPR, EU 2016/679) and Spain’s Organic Law 3/2018 (LOPDGDD).
1. Who is responsible
Controller: Asociación She Wins, [Tax ID (NIF/CIF)], C/ Ancha del Carmen 32, 29002 Málaga (Niage Garage CoWorking). Contact for privacy matters: agnieszka@shewins.es.
2. What data we collect and why
- Membership waitlist form: name, email and where you are right now. Purpose: to let you know when membership opens. Legal basis: your consent (art. 6.1.a GDPR).
- Contact form: role, name, organisation, email and message. Purpose: to answer your enquiry and, if relevant, discuss collaboration. Legal basis: your request and our legitimate interest in replying (art. 6.1.b and 6.1.f GDPR).
- The SheWins Letter: your email. Purpose: to send you the newsletter. Legal basis: your consent (art. 6.1.a GDPR).
- Event registration: done on Meetup, a third party with its own privacy policy. SheWins does not collect your data on this site for that.
3. How long we keep it
Waitlist and newsletter data: until you withdraw consent or unsubscribe. Contact enquiries: for the time needed to handle them and, afterwards, blocked for the legal limitation periods.
4. Who receives it
We do not sell your data. It may be processed by providers acting on our behalf, such as website hosting and email-sending tools ([list providers]), under data processing agreements. We may disclose data to authorities when the law requires it.
5. International transfers
If a provider is located outside the European Economic Area, the transfer will rely on an adequacy decision or on standard contractual clauses.
6. Your rights
You can ask for access, rectification, erasure, restriction, portability and objection, and withdraw your consent at any time, by writing to agnieszka@shewins.es and identifying yourself. If you think your rights have not been respected, you can complain to the Spanish Data Protection Agency (www.aepd.es).
7. Minors
This website is aimed at adults. Please do not send us data of people under 18.
8. Security
We apply reasonable technical and organisational measures to protect your data against loss, misuse and unauthorised access.
9. Changes
We may update this policy. The date at the top shows the latest version.