Protocol 1 of 4 · GDPR
Privacy Policy
1.1 Controller. ContentNorthWorks, 05004, C. Madrigal de las Altas Tor, 4 IZ P05 1, Ávila, Ávila, Spain, is the data controller for personal data processed through this website and our copywriting engagements. Supervisory contact: [email protected].
1.2 Data we collect. (a) Requisition voucher fields you submit — name, email, phone, organization, brief notes; (b) technical logs — IP address, user agent, pages viewed, cookie consent state; (c) billing metadata processed by our payment provider when you use the Pay link. We do not process special-category data (GDPR Art. 9) and do not knowingly collect data from minors under 16.
1.3 Purposes & legal bases. Contract performance (Art. 6(1)(b)) for quoting and delivering copy assays; legitimate interest (Art. 6(1)(f)) for site security, abuse prevention, and aggregate analytics; consent (Art. 6(1)(a)) for non-essential cookies, which you may grant or refuse via the consent banner.
1.4 Processors & transfers. Data is processed by vetted processors under Art. 28 DPA: email delivery, hosting within the EEA/UK, and Stripe for payments. Where a processor operates outside the EEA, transfers rely on Standard Contractual Clauses plus supplementary safeguards. We never sell, rent, or broker personal data.
1.5 Retention. Requisition and contract records: 6 years (Spanish commercial & tax code). Support correspondence: 24 months. Server logs: 12 months. Cookie consent state: 12 months or until you clear it.
1.6 Your rights. You may request access, rectification, erasure, restriction, portability, and objection (Arts. 15–21 GDPR), and withdraw consent at any time without affecting prior processing. Write to [email protected]; we respond within 30 days. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) or your local EU authority.