privacy policy

data controller
In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), the data controller is:

Business name: Maria Boixareu i Castillo
Legal status: Self-employed professional (autónoma)
Email address: manebacollective@gmail.com
Location: Spain

(In compliance with Spanish regulations, the full address is not publicly displayed. It will be provided to competent authorities upon request.)

purpose of data processing
Maneba Collective processes personal data provided by users for the following purposes:
To send newsletters and informational communications
To respond to information requests related to retreats and experiences
To manage voluntary registrations from users interested in receiving further information about our activities
To manage payments, bookings and reservations

legal basis
The legal basis for processing personal data is the explicit consent of the user, granted by ticking the corresponding checkboxes in the website forms, in accordance with Article 6.1(a) GDPR.

data retention
Personal data will be kept only for the time strictly necessary to fulfil the purpose for which it was collected, or until the user requests its deletion.

data recipients
Personal data will not be shared with third parties, except for the service providers strictly necessary for the operation of the website (Mollie for payment processing and Resend for sending emails), or where required by law.
No international data transfers outside the European Economic Area (EEA) are carried out.

user rights
Users have the right to:
Access their personal data
Request rectification or deletion
Request restriction of processing
Object to processing
Request data portability

To exercise these rights, users may contact:
manebacollective@gmail.com

Users also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD).