1. DATA CONTROLLER

The data controller responsible for the processing of personal data collected through this website is:

• Identity: SIMON VUCER (hereinafter, SELFREHACK)
• Legal Status: Sole Trader / Self-Employed (Autónomo)
• Tax Identification Number (NIF): Z2560558L
• Location / Headquarters: Los Realejos, Santa Cruz de Tenerife, Spain
• Contact Email: info@selfrehack.com
• Website / Contact Form: https://selfrehack.com/en/contact/

SELFREHACK adopts the necessary technical and organizational measures to guarantee the security and confidentiality of the personal data collected, in compliance with Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 (LOPD-GDD), and Law 34/2002 (LSSI-CE).

2. PURPOSE, LAWFULNESS, AND STORAGE OF DATA

Below is the detailed information regarding the processing of personal data carried out through the platform:

Data Processing	Purpose of Processing	Lawfulness / Legal Basis	Retention Period
Contact Form / Web Form	To respond to inquiries, requests for information, or petitions submitted by users through the website.	Consent of the data subject (by ticking the acceptance box) and implementation of pre-contractual measures.	Data will be stored for the time necessary to resolve the inquiry and, at most, for 6 years if it leads to a commercial relationship.
Customer Management	Administrative, accounting, tax management, and the provision of contracted services.	Performance of a contract for the provision of services.	For the duration of the contractual relationship and, subsequently, during the applicable statutory periods (4 years for tax obligations and 6 years under commercial regulations).
Supplier Management	Commercial, administrative, and payment relationship management with suppliers.	Performance of a contract or commercial agreement.	For the time necessary to manage the relationship and a minimum of 4 to 6 years to comply with legal and tax obligations.

3. RECIPIENTS AND INTERNATIONAL TRANSFERS

• Transfers to Third Parties: No data transfers to third parties are foreseen, except under legal obligation (for example, Public Administrations, Tax Authorities, or Banking Entities for service collection).
• International Transfers: No international transfers of data outside the European Economic Area (EEA) are carried out. Should technological service providers outside the EEA be used (for example, hosting or email tools), appropriate safeguards will be ensured (such as Standard Contractual Clauses approved by the European Commission).

4. USER RIGHTS AND HOW TO EXERCISE THEM

Any individual has the right to obtain confirmation as to whether SELFREHACK is processing personal data that concerns them.

Users may exercise the following rights:

• Access: The right to know what personal data we are processing.
• Rectification: The right to request the correction of inaccurate or incomplete data.
• Erasure (“Right to be Forgotten”): The right to request the deletion of their data when it is no longer necessary for the purposes for which it was collected.
• Restriction of Processing: The right to request that the processing of their data be restricted under certain circumstances.
• Objection: The right to object to the processing of their data for reasons related to their particular situation.
• Data Portability: The right to receive their data in a structured, commonly used, and machine-readable format, or to request its transfer to another controller where technically feasible.

How to exercise your rights?

To exercise any of these rights, the user may send a written request stating the right they wish to exercise via email to info@selfrehack.com or through the contact form available on our website: https://selfrehack.com/en/contact/

Note on identity verification: To protect the security of your data, in case of reasonable doubt regarding the applicant’s identity, additional information or proof of identity may be requested.

Right to lodge a complaint with the supervisory authority

If the user considers that the processing of their personal data infringes applicable regulations or that their rights have not been adequately addressed, they have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) through its electronic headquarters at www.aepd.es.

5. PERSONAL DATA OF MINORS

In compliance with Article 8 of the GDPR and Article 7 of the LOPD-GDD, only individuals over 14 years of age may lawfully grant their consent for the processing of their personal data on this website. If the user is under 14 years of age, the consent of their parents or legal guardians shall be mandatory for the processing to be considered lawful.

6. DATA SECRECY AND SECURITY

SELFREHACK is committed to processing users’ personal data while respecting its confidentiality and using it in accordance with the purposes set out in this Policy.

Furthermore, all necessary technical and organizational security measures are adopted to prevent the alteration, loss, unauthorized processing, or access to the data. In the event of a security breach that poses a high risk to the rights and freedoms of individuals, the relevant authorities and affected users will be notified without undue delay.