Privacy Policy
In compliance with Regulation (EU) 2016/679 of 27 April (GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), users are hereby informed of the processing of their personal data.
1. Data Controller
| Name | Cristina Fuentes Sánchez |
| Tax ID (NIF) | 2021777Z |
| Address | Calle Cardenal Cisneros 11, 1º Izq — 39001 Santander (Cantabria), Spain |
| info@cristinafuentes.es | |
| Website | https://www.cristinafuentes.es |
2. Personal data processed
Depending on how the user interacts with the website, the following categories of data may be processed:
- Contact form: name, email address, phone number and message content.
- Quote request: name, email address, document description and, where applicable, the attached file.
- Browsing data: IP address, browser type, pages visited and session duration, collected anonymously through Google Analytics. For more information, please see the Cookie Policy.
No special categories of data (Article 9 GDPR) or data relating to children under 14 are processed. If we detect that data from a minor has been submitted without parental consent, it will be deleted immediately.
3. Purpose and legal basis for processing
| Purpose | Legal basis |
|---|---|
| Responding to enquiries submitted via the contact form or by email. | Legitimate interest of the controller (Art. 6.1.f GDPR) or pre-contractual measures (Art. 6.1.b GDPR). |
| Preparing and sending quotes for translation and interpreting services. | Pre-contractual measures at the request of the data subject (Art. 6.1.b GDPR). |
| Providing the contracted translation or interpreting service and invoicing. | Performance of a contract (Art. 6.1.b GDPR) and compliance with legal obligations (Art. 6.1.c GDPR). |
| Anonymous statistical analysis of website traffic via Google Analytics. | User consent (Art. 6.1.a GDPR), given through the cookie banner. |
4. Retention period
- Enquiries without subsequent contract: retained for as long as necessary to respond and during the limitation period for potential claims (1 year).
- Client data and contracts: for the duration of the contractual relationship and, once ended, for the legally required periods: 5 years under the Spanish Commercial Code and 4 years under tax legislation.
- Invoicing data: 6 years (Art. 30 Spanish Commercial Code).
- Analytics data (Google Analytics): according to the data retention settings in the Google Analytics account (maximum 14 months).
5. Recipients and data processors
Personal data is not disclosed or transferred to third parties, except in the following cases:
- Legal obligation: when required by competent authorities (tax authorities, courts, etc.).
- Google LLC (Google Analytics): data processor for statistical analysis of website traffic. Google LLC, based in the USA, adheres to the EU-U.S. Data Privacy Framework. More information at https://policies.google.com/privacy.
- Web hosting provider: data processor for server data storage. Hosting is located within the European Union.
No international transfers of personal data are made other than those arising from the use of Google Analytics, covered by the framework mentioned above.
6. Rights of data subjects
Users may exercise the following rights under the GDPR at any time:
- Access: obtain confirmation as to whether personal data is being processed and access it.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure ("right to be forgotten"): request deletion of personal data when it is no longer necessary for the purposes for which it was collected.
- Objection: object to the processing of personal data in certain circumstances.
- Restriction of processing: request that processing of personal data be restricted in the cases provided for by law.
- Data portability: receive personal data in a structured, commonly used and machine-readable format, and transmit it to another controller.
- Withdrawal of consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
To exercise these rights, users may contact the data controller in writing:
- Email: info@cristinafuentes.es
- Postal address: Calle Cardenal Cisneros 11, 1º Izq — 39001 Santander (Cantabria), Spain
The request must be accompanied by a copy of the applicant's national identity document or equivalent. A response will be provided within a maximum period of one month from receipt of the request.
7. Right to lodge a complaint
If users consider that the processing of their personal data is not appropriate, they have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), the competent supervisory authority in Spain:
- Address: C/ Jorge Juan, 6 — 28001 Madrid, Spain
- Website: https://www.aepd.es
8. Professional confidentiality
As a sworn translator and interpreter, Cristina Fuentes Sánchez is bound by professional confidentiality. Documents and content provided by clients for the purposes of translation or interpreting services will be treated with absolute discretion and will not be disclosed to third parties under any circumstances.
9. Cookies
This website uses first-party and third-party cookies. For detailed information about the cookies used, their purpose and how to manage them, please see the Cookie Policy.
10. Changes to this policy
This privacy policy may be updated to reflect legislative changes or modifications to the website's services. We recommend reviewing it periodically. Last updated: 18/04/2026.