I. PRIVACY POLICY AND DATA PROTECTION

In compliance with current legislation, MidLife Redesigned (hereinafter, also the Website) commits to adopting the necessary technical and organizational measures appropriate to the level of security risk posed by the collected data.

Laws Incorporated in This Privacy Policy

This privacy policy is adapted to current Spanish and European regulations regarding the protection of personal data on the internet. Specifically, it complies with the following laws:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
• Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
• Royal Decree 1720/2007, of December 21, approving the implementing regulation of Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).
• Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce (LSSI-CE).

Identity of the Data Controller

The data controller for the personal data collected on MidLife Redesigned is:
Saint-Aubyn & Partners, SL, with CIF: B01925304, registered in the Madrid Commercial Registry.
The legal representative will be referred to as the Data Controller.
Contact email: [contacto@web.com]

Registration of Personal Data

In accordance with the GDPR and LOPD-GDD, we inform you that any personal data collected via the forms on our pages will be incorporated and processed in our files for the purpose of facilitating, expediting, and fulfilling the commitments established between MidLife Redesigned and the User, or for maintaining the relationship reflected in the forms filled out, or to respond to a request or inquiry.

Unless the exception in Article 30.5 of the GDPR applies, a record of processing activities is maintained specifying, by purpose, the processing activities carried out and other circumstances established by the GDPR.

Principles Applicable to Personal Data Processing

The User’s personal data will be processed in accordance with the following principles (GDPR Art. 5 and Organic Law 3/2018, Art. 4 and onwards):

• Lawfulness, fairness, and transparency: User consent will always be required with transparent information on the purposes.
• Purpose limitation: Data will be collected for specific, explicit, and legitimate purposes.
• Data minimization: Only the data strictly necessary for the stated purposes will be collected.
• Accuracy: Data must be accurate and up to date.
• Storage limitation: Data will be stored only as long as necessary for its intended purpose.
• Integrity and confidentiality: Data will be processed securely and confidentially.
• Accountability: The Controller is responsible for compliance with these principles.

Categories of Personal Data

Only identifying information is processed on MidLife Redesigned. No special categories of personal data are processed as defined in Article 9 of the GDPR.

Legal Basis for Processing

The legal basis for processing personal data is consent.
MidLife Redesigned commits to obtaining explicit and verifiable consent from Users for one or more specific purposes.
Users can withdraw their consent at any time, with the same ease as granting it. Withdrawing consent will not affect the use of the Website.

When a form requires data for inquiries or content-related reasons, Users will be informed of any mandatory fields.

Purposes of Data Processing

The personal data is collected to:

• Facilitate, expedite, and fulfill commitments between the Website and the User;
• Maintain the relationship reflected in completed forms;
• Respond to inquiries or requests.

Additionally, the data may be used for:

• Personalized marketing;
• Operational and statistical purposes;
• Internal business activities;
• Data storage and marketing research to improve the content, quality, and usability of the Website.

Users will be informed of the specific purpose(s) at the time of data collection.

Retention Period

Personal data will be retained only as long as necessary, and in any case:

• For 18 months, or
• Until the User requests its deletion.

Users will be informed of the retention period or the criteria used to determine it.

Data Recipients

User data will not be shared with third parties.
At the time of data collection, Users will be informed if there are any data recipients or categories of recipients.

Data from Minors

In accordance with the GDPR and Spanish law, only Users over 14 years of age may lawfully consent to data processing by MidLife Redesigned.
For minors under 14, parental or guardian consent is required.

Data Security and Confidentiality

MidLife Redesigned commits to adopting appropriate technical and organizational measures to ensure data security and prevent unauthorized access, destruction, or alteration of personal data.

However, due to the nature of the internet, it cannot guarantee total invulnerability or protection from hackers. In case of a likely high-risk data breach, the Controller will inform the User without undue delay.

Personal data will be treated as confidential. The Controller will ensure all employees, associates, or anyone granted access also maintain confidentiality.

User Rights

Users have the following rights under GDPR and the LOPD-GDD:

• Right of access: Know whether your data is being processed and access such data.
• Right to rectification: Modify inaccurate or incomplete data.
• Right to erasure («right to be forgotten»): Delete your data under certain conditions.
• Right to restriction of processing: Limit processing under specific conditions.
• Right to data portability: Receive your data in a structured, machine-readable format and transfer it.
• Right to object: Stop or prevent data processing.
• Right not to be subject to automated decision-making, including profiling.

To exercise these rights, Users must send a written request to the Controller with the reference «GDPR-[web]», including:

• Full name and ID copy (or other valid identification);
• The specific request and reasons;
• Notification address;
• Date and signature;
• Supporting documents, if applicable.

Send to: [contacto@web.com]

Links to Third-Party Websites

The Website may include links to third-party sites not operated by MidLife Redesigned.
These sites have their own privacy policies and are solely responsible for their data practices.

Complaints to the Supervisory Authority

If a User believes there has been a violation of applicable data protection laws, they have the right to effective judicial protection and to file a complaint with a supervisory authority.

In Spain, the authority is the Spanish Data Protection Agency (AEPD):
👉 https://www.aepd.es

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

The User must have read and agreed to this Privacy Policy and its conditions regarding personal data protection. Consent is required for the Controller to process personal data as described.

Using the Website implies acceptance of this Privacy Policy.

MidLife Redesigned reserves the right to modify this Privacy Policy based on legislative, judicial, or regulatory changes. Updates may not be explicitly notified, so Users are advised to check this page periodically.

This Privacy Policy was updated in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and Digital Rights.