Privacy Policy

In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), this policy informs users about the processing of personal data through the website lifeinthesun.es.

1. Data Controller

Controller: Life In The Sun (Jessica) Contact email: jessica@lifeinthesun.es Website: lifeinthesun.es Main service area: Spain (Costa del Sol)

2. Personal data we process

We may process the following personal data when you contact us:

• First and last name
• Email address
• Phone number (optional)
• Message content and any information you choose to include
• Technical metadata associated with the communication (e.g., date/time of submission)

Recommendation: please do not send special category/sensitive data (health, beliefs, minors’ data, etc.) via the form.

3. Purposes of processing

We process personal data for the following purposes:

• To manage and respond to enquiries, information requests, or quotations.
• To send informational communications about services, updates, or content from Life In The Sun only if you explicitly consent.
• Internal management of requests (organization, follow-up, and archiving of communications).

4. Legal basis

• Consent (GDPR Art. 6(1)(a)) for marketing/informational communications (“updates”).
• Pre-contractual measures (GDPR Art. 6(1)(b)) when you request information or a quotation.
• Legitimate interest (GDPR Art. 6(1)(f)) for basic organization and security of communications, respecting users’ rights.

5. Data retention

Data will be kept for the time necessary to fulfil the purpose for which it was collected:

• Enquiries and requests: as long as necessary to handle them, and thereafter for applicable legal periods or potential liabilities.
• Informational communications (“updates”): until you withdraw your consent (unsubscribe).

6. Recipients and processors

We do not share data with third parties unless required by law. We may use service providers acting as data processors, for example:

• Resend (transactional email delivery)
• Notion (internal management and storage of requests/CRM)
• Vercel (hosting and performance/analytics, where applicable)

These providers process data under our instructions and with appropriate safeguards, including data processing agreements where required.

7. International transfers

Some providers may process or store data outside the European Economic Area (EEA). Where applicable, transfers are carried out with appropriate safeguards under GDPR, such as Standard Contractual Clauses or other valid mechanisms.

8. Your rights

You may exercise your GDPR rights at any time:

• Access
• Rectification
• Erasure
• Restriction
• Portability
• Objection
• Withdrawal of consent (without affecting prior lawfulness)

To exercise these rights, email jessica@lifeinthesun.es indicating the right you wish to exercise and, where necessary, proof of identity. If you believe your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Authority (AEPD).

9. Security measures

We apply reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure, taking into account the nature of the data and associated risks.

10. Marketing communications (“updates”)

We will only send informational or promotional communications if you have explicitly checked the relevant consent box. You can withdraw your consent at any time by emailing jessica@lifeinthesun.es (and/or via an unsubscribe link if available).

11. Changes to this policy

This policy may be updated to reflect legal or technical changes. We recommend reviewing it periodically.

Last updated: 2025-12-17