Privacy Policy
1. Introduction
Cathy Rocks (hereinafter referred to as "we", "us", or "our") is committed to protecting your privacy and ensuring that your personal data are processed in accordance with applicable data protection legislation, including Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
We understand that the privacy and security of your personal information are extremely important. Therefore, this Privacy Policy explains what personal data we collect, how we use it, how we protect it, and the rights you have regarding your personal information.
2. Data Controller & Contact Information
In accordance with Article 10 of Spanish Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE), and applicable data protection legislation, the following information is provided:
Trade Name: Cathy Rocks
Registered Business Address:
Pz. Villa Castelldefels 4, Picasso BC, Of. AIU
29006 Málaga
Spain
Email: author@cathyrocks.com
Spanish Tax Identification Number (NIE): Y4488386L
3. Legal Framework
This Privacy Policy complies with the following legislation:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR).
- Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
- Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).
4. Personal Data We Collect
Depending on your interaction with this website, we may collect and process the following categories of personal data:
Contact Information
- Name
- Email address
- Telephone number (where provided)
when you voluntarily complete a contact form, subscribe to our newsletter, or place an order.
Delivery Information
- Full name
- Shipping address
- Telephone number
when you expressly request that we purchase author copies from Amazon on your behalf.
Technical Data
- IP address
- Browser type and version
- Time zone
- Browser plug-ins
- Operating system
- Device information
Usage Data
Information about how you use our website, products, and services.
Cookies
We use cookies to improve your browsing experience and analyse website traffic. Please refer to our Cookie Policy for further information.
All personal information submitted through electronic forms or email is processed solely for the purposes for which it is provided.
5. Purposes and Legal Basis for Processing
We only process your personal data where permitted by law.
| Purpose | Legal Basis (GDPR) |
|---|---|
| Responding to enquiries submitted through our contact form or by email. | Consent (Art. 6(1)(a)) |
| Providing products or services requested by you. | Contract (Art. 6(1)(b)) |
| Purchasing author copies from Amazon on your behalf when expressly requested. | Contract (Art. 6(1)(b)) |
| Sharing delivery information with Amazon solely to fulfil your order. | Consent (Art. 6(1)(a)) |
| Improving our website through analytics. | Legitimate Interest (Art. 6(1)(f)) |
| Sending newsletters or marketing communications. | Consent (Art. 6(1)(a)) |
| Complying with legal, tax and accounting obligations. | Legal Obligation (Art. 6(1)(c)) |
6. Data Sharing with Amazon (Order Fulfilment)
If you ask us to purchase author copies from Amazon on your behalf, we must share certain information with Amazon to complete your request.
When is your data shared?
Only when you expressly request that we purchase author copies on your behalf.
What information is shared?
- Full name
- Delivery address
- Telephone number (where required by the carrier)
Why is it shared?
Only for order processing and delivery.
Can you avoid this?
Yes. If you prefer not to have your delivery information shared with Amazon by us, you may purchase the books directly through Amazon.
How does Amazon process your information?
Amazon acts as an independent data controller and processes your personal data according to its own Privacy Policy.
How long do we retain this information?
We retain delivery information only for as long as necessary to complete the order, resolve delivery issues, and comply with applicable legal obligations.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or where required by law.
Typical retention periods include:
- Contact enquiries: for as long as necessary to respond to your enquiry, unless a longer retention period is required by law.
- Delivery information: until the order has been completed and any delivery-related issues have been resolved.
- Analytics information: up to 26 months.
- Marketing communications: until you withdraw your consent.
- Transactional and accounting records: for the periods required under applicable Spanish tax and commercial legislation.
8. Recipients of Personal Data
We never sell, rent, or trade your personal data for marketing purposes.
Your data may be shared only where necessary with:
- Amazon, solely to fulfil orders you have expressly requested.
- Service providers, including:
- Google Ireland Limited (with possible international data transfers where applicable) for website analytics.
- MailerLite for newsletter management and email marketing.
- Legal or regulatory authorities, where disclosure is required by law.
9. International Data Transfers
Some service providers may process personal data outside the European Economic Area (EEA).
Where international transfers occur, we ensure that appropriate safeguards are implemented, including:
- European Commission Adequacy Decisions;
- Standard Contractual Clauses (SCCs) approved by the European Commission; or
- other safeguards recognised under the GDPR.
10. Your Rights
Under the GDPR and the LOPDGDD, you have the right to:
- Access your personal data.
- Request correction of inaccurate or incomplete data.
- Request erasure of your data ("right to be forgotten").
- Restrict processing.
- Receive your data in a portable format.
- Object to processing.
- Withdraw your consent at any time where processing is based on consent.
Exercising Your Rights
You may exercise your rights by contacting us at:
Email: author@cathyrocks.com
Postal Address:
Cathy Rocks
Pz. Villa Castelldefels 4, Picasso BC, Of. AIU
29006 Málaga
Spain
For security purposes, we may request additional information to verify your identity before processing your request.
If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (AEPD):
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
These measures include, where applicable:
- SSL/TLS encryption.
- Regular reviews of our data protection practices.
- Restricting access to personal data to persons who require such access for the purposes described in this Privacy Policy, including trusted service providers where applicable.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes.
The most recent version will always be published on this page, and users are encouraged to review it periodically.
13. Contact Us
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us:
Email: author@cathyrocks.com
Website: https://cathyrocks.com
or through the contact form available on this website.
