PRIVACY AND DATA PROTECTION POLICY

Last updated: April 2026

1. Data Controller

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), the data controller for personal data collected through this Website is:

Name: Doina Manuela Daniela Aznar-Granados Tecu
Address: Calle Camino de la Termica 30, 29004 Málaga, Spain
Email: hello@d-exclusive.com
Website: www.d-exclusive.com

2. Data Collected and Purposes of Processing

We collect and process personal data that you voluntarily provide through the contact forms and other means of communication available on the Website. The data collected may include your name, email address, telephone number, and any other information you choose to provide.

The purposes of processing are:

  • Responding to enquiries and requests submitted through the Website.
  • Sending information about our services, where you have provided your consent.
  • Managing the contractual relationship where applicable.
  • Complying with legal obligations.

3. Legal Basis for Processing

The legal basis for processing your personal data depends on the purpose:

  • Consent (Article 6(1)(a) GDPR): for sending commercial communications and newsletters.
  • Performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR): for managing service requests.
  • Compliance with a legal obligation (Article 6(1)(c) GDPR): where processing is required by applicable law.
  • Legitimate interests (Article 6(1)(f) GDPR): for the proper functioning and security of the Website.

4. Data Retention

Personal data will be retained for no longer than is necessary for the purposes for which it was collected, and in any case:

  • Contact and enquiry data: retained for a maximum of 3 years from the last interaction, unless a longer retention period is required by law.
  • Data processed under consent: until you withdraw your consent.
  • Data subject to legal retention obligations: for the period established by the applicable legislation.

5. Recipients and International Transfers

Your personal data will not be transferred to third parties except where legally required or where necessary for the provision of services (e.g. hosting providers, analytics services). Any such transfers are governed by appropriate safeguards in accordance with Chapter V of the GDPR, including Standard Contractual Clauses where applicable.

6. Your Rights

Under the GDPR and the LOPDGDD, you have the following rights in relation to your personal data:

  • Right of access: to obtain confirmation as to whether your data is being processed and, if so, to access it.
  • Right to rectification: to request the correction of inaccurate or incomplete data.
  • Right to erasure (‘right to be forgotten’): to request the deletion of your data where the legal grounds for processing no longer apply.
  • Right to restriction of processing: to request that we limit how we use your data in certain circumstances.
  • Right to data portability: to receive your data in a structured, commonly used and machine-readable format, where processing is based on consent or a contract and carried out by automated means.
  • Right to object: to object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us:

In writing: Calle Camino de la Termica 30, 29004 Málaga, Spain
By email: hello@d-exclusive.com

You also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos — AEPD) if you consider that your rights have not been respected: www.aepd.es

7. Security Measures

Doina Manuela Daniela Aznar-Granados Tecu has implemented the technical and organisational security measures required by Article 32 of the GDPR to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

8. Accuracy of Data

Users are responsible for the accuracy of the data they provide. The data controller may exclude from its services any user who has provided false or inaccurate information, without prejudice to any other legal actions that may apply.

9. Changes to this Policy

Doina Manuela Daniela Aznar-Granados Tecu reserves the right to modify this Privacy Policy to adapt it to legislative or jurisprudential changes. Any material changes will be communicated on the Website with reasonable notice before they take effect.