Privacy policy

Last updated: June 2026

At Sara Kafetegia we respect your privacy and take the protection of your personal data seriously. This policy explains what data we process, for what purpose and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD, the Spanish law that supplements the GDPR on data protection).

Data controller

Note to the site owner: complete the NIF/CIF and, if you appoint a Data Protection Officer, add their contact details here before publishing the site.

What data we collect

This website is informational in nature and collects the minimum amount of data possible. Specifically, we only process personal data when you voluntarily provide it through the contact form:

• Name (so we can address you).
• Email address (so we can reply to you).
• The message you write to us (with the content of your enquiry).

We do not collect special-category data or build profiles. We also do not sell products online through this website.

Purpose

We process your data solely to handle and respond to your enquiry or request. We do not use it to send you commercial communications unless you give us your express, separate consent.

Legal basis

The basis that legitimises the processing is your consent, which you give by filling in and submitting the contact form (Article 6.1.a GDPR). You may withdraw that consent at any time by writing to us.

How long we keep your data

We will keep your data for as long as necessary to handle your enquiry and, afterwards, for the periods legally required to address any potential liabilities. Once no longer necessary, it will be securely deleted.

Who we share your data with

We do not share your data with third parties, except where legally required. This site is hosted on static hosting services (GitHub Pages and/or Netlify), which act as processors of the infrastructure and may log technical access data (such as IP address) in order to provide and secure the service.

Your rights

As the data subject, you may exercise the following rights at any time:

• Access: find out what data of yours we process.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request that we delete your data.
• Objection: object to a specific processing activity.
• Restriction: ask us to restrict the processing.
• Portability: receive your data in a structured format.

To exercise them, write to us stating which right you wish to exercise. If you believe we have not properly handled your request, you have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD), Spain's data protection authority, at www.aepd.es.

Security of your data

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration. The site is served over an encrypted connection (HTTPS).

Cookies

The use of cookies is detailed in our Cookie policy.