AFARAexperience
Studio Experiences Contact
ES EN
DATA PROTECTION

Privacy policy

Last updated: July 2026

At AFARA Experience we take privacy seriously. This policy explains clearly what data we collect, what we use it for, and what rights you have over it, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

  • Controller: María José Santander (AFARA Experience)
  • Tax ID (NIE): Z0824472L
  • Address: Calle Joaquín María Bover 11, 07005 Palma de Mallorca, Balearic Islands, Spain
  • Contact email: maria@afara.es

2. What data we process

We only process data you voluntarily provide through the contact form or by email:

  • Name and surname
  • Company or brand (optional)
  • Email address
  • Phone number (optional)
  • Type of experience, approximate dates and the content of your message

We do not collect special category data, nor do we carry out profiling or automated decision-making.

3. What we use your data for

  • Responding to your enquiry and maintaining communication with you
  • Preparing and sending you a tailored proposal
  • Managing the commercial relationship should you engage our services

We do not use your data to send unsolicited marketing, nor do we share it with third parties for advertising purposes.

4. Legal basis

The lawful basis for processing is your express consent, given by ticking the acceptance box on the form or by writing to us directly (Art. 6.1.a GDPR). In the event of engagement, the basis will be performance of a contract or pre-contractual measures (Art. 6.1.b GDPR).

5. How long we keep your data

We keep your data for as long as necessary to handle your request and, where applicable, for the duration of the commercial relationship. Afterwards it is blocked for the periods required by tax and commercial law (generally six years) and then securely deleted.

If your enquiry does not lead to an engagement, data will be deleted no later than twelve months after the last contact.

6. Recipients and processors

Your data is not shared with third parties except where legally required. To deliver the service we work with the following technology providers, acting as processors and complying with the GDPR:

  • Formspree Inc. — contact form processing. Data hosted in the USA under the European Commission's Standard Contractual Clauses.
  • Web hosting and email provider — hosting of the site and mailbox.
  • Cloudflare, Inc. — aggregated web analytics service (Cloudflare Web Analytics). It uses no cookies, no persistent identifiers and builds no user profiles. Data is processed in aggregated, anonymous form under the European Commission's Standard Contractual Clauses.

No other international data transfers take place.

7. Cookies

This website uses no first-party or third-party cookies. Fonts are served from our own server, with no third-party connection.

To understand how many people visit the site and which pages are most useful, we use Cloudflare Web Analytics, a cookieless measurement tool: it stores no file or identifier on your device, does not track you across sites or devices, and builds no profiles. Information is collected in aggregated, anonymous form (page views, approximate country, device type and referring site), with no possibility of identifying any individual.

As no identifiers are installed on your device, no cookie consent banner is required.

8. Your rights

You may exercise the following rights at any time by writing to maria@afara.es, stating the right you wish to exercise and attaching a copy of your identity document:

  • Access: find out what data of yours we process
  • Rectification: correct inaccurate data
  • Erasure: request deletion of your data
  • Objection: object to certain processing
  • Restriction: ask us to restrict processing
  • Portability: receive your data in a structured format
  • Withdrawal of consent: at any time, without retroactive effect

We will respond within one month. If you believe your request has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid.

9. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration. The website operates over secure HTTPS.

10. Changes to this policy

We may update this policy to reflect regulatory changes or changes to our services. The version in force will always be the one published on this page, with its update date.

AFARAexperience

Corporate and in-person experience design studio. Palma de Mallorca.

Studio

  • About us
  • Experiences
  • Contact

Experiences

  • Corporate
  • End of season
  • SOY Congress

Contact

  • maria@afara.es
  • +34 671 369 682
  • Instagram
AFARA EXPERIENCE · MMXXVI
Legal noticePrivacy
PALMA DE MALLORCA