Privacy Policy
Last updated: 15 January 2026
At Credastelio S.L. (hereinafter, 'Credastelio') we take the protection of your personal data very seriously. This policy explains how we collect, use and protect the information you provide through the website credastelio.com, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).
1. Data controller
Credastelio S.L., Tax ID B-87423516, registered office at Calle de Velázquez, 78, 4th floor, 28006 Madrid (Spain). Contact email: privacidad@credastelio.com.
2. Data we collect
We only process the data you voluntarily provide through the newsletter subscription form (name and email address) and the browsing data collected through analytical cookies when you give your consent.
3. Purpose and legal basis
Your data is used exclusively to send you our informative bulletin, based on your express consent (art. 6.1.a GDPR), and to carry out anonymous statistical measurements of website usage.
4. Data retention
We keep your data for as long as your subscription is active and you do not request its deletion. Aggregated analytical data is kept for a maximum of 26 months.
5. Disclosure to third parties
We do not share your data with third parties except where required by law. Some service providers (web hosting, mailing platform) act as data processors under contract and in accordance with the GDPR.
6. Your rights
You may exercise your rights of access, rectification, deletion, objection, restriction and portability at any time by writing to privacidad@credastelio.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Security
We apply appropriate technical and organisational measures to protect your data against loss, misuse or unauthorised access, including HTTPS encryption across the entire website.