Logomarca brava mundana blanco con tagline versión horizontal

Privacy and Data Protection Policy

In compliance with current legislation, brava mundana (hereinafter also referred to as the “Website”) is committed to adopting the necessary technical and organizational measures appropriate to the level of security required by the risk associated with the data collected.


Legislation incorporated into this privacy policy

This privacy policy is adapted to current Spanish and European regulations regarding the protection of personal data on the internet. Specifically, it adheres to the following laws:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

  • Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).

  • Royal Decree 1720/2007, of 21 December, approving the implementing regulation of Organic Law 15/1999, of 13 December, on the Protection of Personal Data (RDLOPD).

  • Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).


Identity of the data controller

The data controller for personal data collected through brava mundana is:

Ana Picado Filgueira, with Tax ID: 46916218J (hereinafter, “Data Controller”).

Contact details: hola@anapicado.com or hola@bravamundana.es


Registration of personal data

In compliance with the GDPR and the LOPD-GDD, users are informed that personal data collected via forms on this Website will be incorporated into our system for the purpose of facilitating, streamlining, and fulfilling the commitments established between brava mundana and the User, or to maintain the relationship reflected in the completed forms or to respond to requests or inquiries.

Likewise, unless the exception in Article 30.5 of the GDPR applies, a record of processing activities will be maintained, specifying processing activities and their purposes, along with other circumstances set out in the GDPR.


Principles applicable to the processing of personal data

The processing of personal data by brava mundana will be subject to the principles set forth in Article 5 of the GDPR and Articles 4 and following of Organic Law 3/2018:

  • Lawfulness, fairness, and transparency: User consent will always be required, following transparent communication of the purposes of data collection.

  • Purpose limitation: Data will be collected for specified, explicit, and legitimate purposes.

  • Data minimization: Only strictly necessary data will be collected.

  • Accuracy: Data must be accurate and kept up to date.

  • Storage limitation: Data will only be retained for as long as necessary for the purposes of processing.

  • Integrity and confidentiality: Data will be processed securely and confidentially.

  • Accountability: The Data Controller will be responsible for ensuring these principles are met.


Categories of personal data

The categories of data processed on brava mundana include identification data only.

No special categories of personal data, as defined in Article 9 of the GDPR, are processed unless otherwise stated.

If special categories of personal data are processed (such as racial or ethnic origin, political opinions, religious beliefs, union membership, genetic or biometric data, health data, or data concerning a person’s sex life or sexual orientation), the explicit consent of the User will always be required for one or more specific purposes.


Legal basis for data processing

The legal basis for processing personal data is consent. brava mundana commits to obtaining the User’s express and verifiable consent for the processing of their personal data for one or more specific purposes.

Users have the right to withdraw their consent at any time. Withdrawing consent will be as easy as giving it, and it will not affect use of the Website.

Whenever the User is asked to fill in a form to request information or make inquiries, it will be indicated which fields are mandatory, as they are necessary for the proper handling of the request.


Purposes of data processing

Personal data collected by brava mundana is used to facilitate, streamline, and fulfill commitments between the Website and the User or to maintain the relationship initiated through the forms or inquiries submitted.

Additionally, data may be used for commercial purposes such as personalization, operations, statistics, and other activities related to the goals of brava mundana, including data extraction, storage, and marketing research to tailor content, improve quality, and enhance the Website’s functionality and user experience.

At the time of data collection, Users will be informed of the specific purposes for which their data will be used.


Data retention periods

Personal data will only be retained for the minimum time necessary to fulfill the processing purposes, and in any case for no longer than 18 months, or until the User requests its deletion.

Users will be informed of the retention period or, when that is not possible, the criteria used to determine it.


Recipients of personal data

User data will not be shared with third parties.

Should the Data Controller intend to transfer data to a third country or international organization, the User will be informed at the time of collection, along with the existence or absence of an adequacy decision by the European Commission.


Personal data of minors

In accordance with Articles 8 of the GDPR and 7 of Organic Law 3/2018, only individuals over the age of 14 may lawfully consent to the processing of their personal data by brava mundana. For users under the age of 14, the consent of parents or legal guardians is required and processing will only be considered lawful if such authorization is obtained.


Confidentiality and security of personal data

brava mundana undertakes to implement the necessary technical and organizational security measures appropriate to the level of risk associated with the collected data, in order to ensure data security and prevent its destruction, loss, alteration, or unauthorized access or disclosure.

The Website is equipped with an SSL (Secure Socket Layer) certificate that ensures that personal data is transmitted securely and confidentially.

However, brava mundana cannot guarantee the absolute invulnerability of the internet or the absence of hackers or others who may fraudulently access personal data. In case of a security breach likely to pose a high risk to the rights and freedoms of individuals, the Data Controller commits to notifying the User without undue delay.

All data will be treated as confidential by the Data Controller, who ensures—through legal or contractual means—that confidentiality is respected by all employees, collaborators, or parties to whom the data is accessible.


Rights of the User

Users have the following rights under the GDPR and Organic Law 3/2018, which they may exercise against brava mundana and the Data Controller:

  • Right of access: To confirm whether their data is being processed and obtain detailed information about it.

  • Right to rectification: To correct inaccurate or incomplete data.

  • Right to erasure (“right to be forgotten”): To delete data when it is no longer necessary, consent is withdrawn, or processing is unlawful, among other cases.

  • Right to restrict processing: To limit data processing under certain conditions (e.g., data inaccuracy, legal claims).

  • Right to data portability: To receive personal data in a structured, commonly used, machine-readable format and transmit it to another controller.

  • Right to object: To object to the processing of their personal data.

  • Right not to be subject to automated decision-making, including profiling: To avoid decisions made solely based on automated processing.