Skip to content

Privacy policy

This policy explains how personal data is collected, used and protected when using this website.

1. Data Controller

The data controller responsible for the processing of personal data collected through this website is:

  • Owner: Sandra Bamboo
  • Legal name: Sandra Villalba
  • Address: Barcelona, Spain
  • Email: [email protected]

2. Applicable regulations

This Privacy Policy complies with applicable data protection laws, including:

  • Regulation (EU) 2016/679 (GDPR)
  • Spanish Organic Law 3/2018 (LOPDGDD)
  • Law 34/2002 on Information Society Services (LSSI-CE)

3. Data collected

Personal data may be collected through:

  • Contact forms
  • Email communication
  • Cookies and analytics (if accepted)

This may include:

  • Name
  • Email address
  • Message content
  • Technical data (IP, browser, device, pages visited)

Providing personal data is voluntary, but failure to do so may prevent the website from responding to inquiries. For detailed information about cookies, please refer to the cookie policy.

4. Purpose of processing

Data is processed for the following purposes:

  • Responding to inquiries and contact requests
  • Managing communication
  • Improving website performance and structure
  • Understanding user behavior (analytics)

5. Legal basis

Processing is based on:

  • Consent — for analytics, cookies and tracking technologies
  • Legitimate interest — for basic website functionality and security

6. Data retention

Data will be retained for as long as necessary to respond to inquiries and for a maximum period of 12 months unless further communication is required.

7. Recipients and service providers

Personal data is not sold or shared with third parties for commercial purposes.

However, certain providers may process data on behalf of this website in order to ensure its proper functioning:

  • Hosting provider: Banahosting — used to host and maintain the website infrastructure, including storage of data submitted through forms.
  • Email and communication services: Brevo — used to manage contact form submissions, email communications and, where applicable, newsletters.
  • Analytics provider: Google Analytics (GA4) — used to analyze user behavior and improve the structure and performance of the website. This tool is only activated if the user has given explicit consent through the cookie banner.
  • Tag management system: Google Tag Manager — used to manage and deploy scripts and tracking technologies on the website. Google Tag Manager does not collect personal data by itself, but may trigger other tools (such as analytics services) based on user consent.

These providers act as data processors and only process personal data under the instructions of the data controller. Tracking technologies are only activated based on the user’s consent preferences configured through the consent management system.

Some of these providers may process data outside the European Economic Area (EEA). In such cases, appropriate safeguards are applied in accordance with GDPR, such as the use of Standard Contractual Clauses (SCCs) or equivalent legal mechanisms.

8. Data security

Appropriate technical and organizational measures are implemented to protect personal data, including secure hosting and SSL encryption.

However, absolute security cannot be guaranteed due to the nature of the internet.

9. User rights

Users have the right to:

  • Access their data
  • Request correction
  • Request deletion
  • Restrict processing
  • Object to processing
  • Request data portability
  • Withdraw consent at any time

Requests can be made by contacting: [email protected]

Users also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD).

10. Third-party links

This website may contain links to external websites. Sandra Bamboo is not responsible for their content or privacy practices.

11. Changes to this policy

This Privacy Policy may be updated to reflect legal or technical changes. Users are encouraged to review it periodically.