Privacy Policy

Last updated: 5 August 2026

1. Who is responsible for your data?

Controller: Jacobo Novo Castro, trading as ColoringColorea
Tax ID: 32827969T
Address: Calle Dulcinea, 3, Estepona, Málaga, Spain
Contact email: hola@coloringcolorea.com

If we appoint a Data Protection Officer, their contact details will be published here: [not applicable / contact details].

2. What data do we collect?

Depending on how you use the Website, we may process:

• Contact-form data: name, email address, country, user type and the message or attachments you choose to send us.
• Technical and usage data: IP address, device and browser information, operating system, pages viewed, referring URLs, dates and times, and similar server-log information.
• Cookie and preference data: identifiers and choices associated with cookies or similar technologies. See our Cookie Policy for details.
• Information you provide when submitting content or entering a competition, if these features are available: [list the exact fields and the relevant supplementary notice].

Please do not send us special-category data or personal information about another person unless it is necessary and you have a lawful basis to do so.

3. Why do we use your data, and on what legal basis?

Purpose	Data used	Legal basis
Reply to messages and manage requests	Contact-form data	Your consent and/or steps requested before entering into a contract
Keep the Website secure and prevent misuse	Technical and usage data	Our legitimate interests in operating a secure service
Measure and improve the Website	Usage and cookie data	Your consent where required for non-essential cookies; otherwise our legitimate interests
Show or measure advertising	Cookie and usage data	Your consent where required
Meet legal obligations or respond to valid requests	Relevant data	Legal obligation or legitimate interest in establishing, exercising or defending legal claims

We do not use your data to make decisions based solely on automated processing that produce legal or similarly significant effects on you.

4. Cookies, analytics and advertising

We use strictly necessary cookies to make the Website work. We use analytics, advertising and other non-essential technologies only where you have given the consent required by applicable law. You can accept, refuse or change your non-essential cookie choices at any time through [Cookie Settings].

Our Cookie Policy identifies each technology, its provider, purpose, duration and, where applicable, the way to withdraw consent.

5. Who receives your data?

We may share data with service providers that help us operate the Website, such as hosting, security, email, analytics, consent-management, advertising or technical-support providers. They may process data only on our instructions where they act as processors, except where they act as independent controllers under their own privacy notices.

Before publication, complete this list with the actual providers: [hosting provider], [email/form provider], [analytics provider], [advertising provider], [cookie-consent provider] and [other relevant providers].

We may also disclose data where required by law or when necessary to protect our rights, users or the public.

6. International transfers

Some providers may process data outside the European Economic Area. Where this occurs, we will use an appropriate transfer mechanism under applicable data-protection law, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, together with any supplementary safeguards required.

Before publication, confirm each non-EEA provider and the safeguard used: [provider / country / safeguard].

7. How long do we keep your data?

We keep personal data only for as long as necessary for the purpose for which it was collected, and afterwards only where required or permitted by law. Our current retention periods are:

• Contact requests: [e.g., 12 months after the request is closed].
• Server and security logs: [e.g., 30 days].
• Analytics data: [e.g., 14 months].
• Cookie choices: as stated in the Cookie Policy.
• Data needed for legal claims or legal obligations: for the applicable statutory limitation or retention period.

8. Your rights

Subject to the conditions in applicable law, you may request access to, rectification or erasure of your data; restriction of processing; data portability; or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise your rights, email hola@coloringcolorea.com with “Data protection request” in the subject line. We may need to confirm your identity. We will respond within the period set by applicable law, normally one month.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) or with the supervisory authority in your habitual residence, workplace or place of the alleged infringement.

9. Children

The Website is designed to offer resources that may be used by children, but contact forms, account features and any data-sharing choices should be completed by a parent, guardian, teacher or other adult with authority to do so. We do not knowingly collect personal data from children in breach of applicable law. If you believe a child has provided us with personal data without appropriate authorisation, contact us so that we can review and, where appropriate, delete it.

10. Security

We use appropriate technical and organisational measures designed to protect personal data. No online service can guarantee absolute security, but we review our safeguards in light of the risks involved.

11. Changes to this policy

We may update this policy to reflect changes to the Website, our processing or applicable law. The current version and its “Last updated” date will always appear on this page. Where a change requires fresh consent, we will ask for it.