Privacy Policy

Last update: 2025-08-26

1. Data Controller

2. Data Processed & Purposes

Additional compatible purposes (audit, legal defense, regulatory compliance) will rely on adequate legal bases.

3. Legal Basis

4. Retention

Data will be stored as long as needed for described purposes and, where applicable, during mandatory legal retention periods (e.g., contractual liability or defense of claims).

5. Recipients & Transfers

Data will not be shared with third parties except legal obligations or essential providers (hosting, security, email, minimal analytics) under processing contracts and appropriate safeguards (e.g., standard contractual clauses for international transfers).

6. User Rights

You may exercise rights of access, rectification, erasure, objection, restriction, and portability by emailing synthia@astrolife.es, including “GDPR Rights” and proof of identity. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

7. Security Measures

We apply technical and organizational measures: encrypted transit, access controls, event logs, CSP/HSTS, XDR, backups, and environment segregation, ensuring confidentiality, integrity and availability.

8. Cookies

See our Cookies Policy for types, purposes and settings.

9. Changes

This policy may be updated due to regulatory or service changes. “Last update” date will always be displayed.