Privacy policy
PRIVACY POLICY (Política de Privacidad)
1. Data Controller (Responsable del Tratamiento)
In compliance with the GDPR and the Spanish LOPDGDD, you are informed that the personal data collected through Stefbastian.com will be processed by:
• Name: Stefano Piterá (operating as "Stef Bastián")
• NIF/NIE: ESX8223760H
• Address: Carrer de Trafalgar, 76, local 1, Ciutat Vella, 08010, Barcelona, Spain
• Email: info@stefbastian.com
2. Personal Data We Collect
We only collect the personal data strictly necessary to provide our services. This includes:
• Identity Data: Name, last name, and billing details.
• Contact Data: Email address and phone number.
• Transaction Data: Details about payments and the digital courses or mentorship programs you have purchased. (Note: We do not store your credit card information; this is handled securely by our payment processors).
• Technical Data: IP address, browser type, and time zone, collected automatically by our website host (Shopify) for security and analytics.
3. Purpose and Legal Basis for Processing
We process your data for the following purposes:
• Contract Execution (Legal Basis: Article 6.1.b GDPR): To process your payments, grant you access to the digital painting courses, and enroll you in the 7-month mentorship program on the Tevello platform.
• Legal Obligations (Legal Basis: Article 6.1.c GDPR): To issue invoices and maintain accounting records as required by Spanish tax law (Hacienda).
• Customer Support (Legal Basis: Article 6.1.f GDPR): To respond to your emails, inquiries, or technical support requests regarding our programs.
4. Data Sharing and Third Parties
We do not sell your personal data. We only share it with trusted third-party service providers who process data on our behalf under strict confidentiality agreements:
• Shopify: Our website host and e-commerce platform. Your data is stored on Shopify’s secure servers.
• Tevello: The platform used to host our mentorship program videos.
• Stripe / PayPal: Our secure payment gateways that process your financial transactions.
• Government Authorities: We may share billing information with the Spanish Tax Agency (Hacienda) to comply with our legal accounting obligations.
5. Data Retention
Your personal data will be kept for the time necessary to fulfill the purpose for which it was collected. For accounting and tax purposes, Spanish law requires us to retain billing data (invoices) for a period of up to 6 years after the transaction.
6. Your Data Protection Rights
Under the GDPR and LOPDGDD, you have the right to:
• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Request Deletion (Right to be Forgotten) of your data when it is no longer necessary for the purposes it was collected (subject to legal tax retention requirements).
• Restrict or Object to the processing of your data.
• Data Portability, requesting a copy of your data in a structured digital format.
To exercise any of these rights, please send an email to info@stefbastian.com with the subject "Data Protection." If you feel your rights have been violated, you also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.