Privacy policy

Last updated: September 28, 2026

1. Data controller

This policy applies to the personal data collected through silviaroyolopez.com. It is drafted in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).

2. What data is collected and why

Only the data you provide in each form and the data generated by your browsing is collected.

2.1 Requesting a first conversation (Coach page)

• Data: name, email address, phone number, chosen date and time and, if you write one, a message.
• Purpose: to handle your request for a free 30-minute session, confirm it personally and contact you to hold it.
• Legal basis: your consent when you check the box in the form, and the taking of pre-contractual steps at your request (Art. 6(1)(a) and 6(1)(b) GDPR).
• Retention: while the session is being handled and, if there is no further relationship, for up to one year afterwards. If you contract a coaching process, for the duration of the relationship and the statutory limitation periods.

2.2 Newsletter

• Data: email address and sign-up date.
• Purpose: to send you, from time to time, reflections and news about business, leadership, motherhood, family, books and coaching.
• Legal basis: your consent when you subscribe (Art. 6(1)(a) GDPR).
• Retention: until you unsubscribe. You can do so at any time from the link in each email or by writing to hello@silviaroyolopez.com.

2.3 SEGUIMOS Workshop waiting list

• Data: email address and sign-up date.
• Purpose: to let you know when registration opens or there is news about the workshop. It is not used for any other mailing.
• Legal basis: your consent when you join the list (Art. 6(1)(a) GDPR).
• Retention: until the edition takes place or until you ask to be removed.

2.4 Contact form

• Data: name, email address, subject and message.
• Purpose: to respond to your inquiry, collaboration proposal, event invitation or press request.
• Legal basis: your consent when you submit the form and, where applicable, the legitimate interest in handling the request (Art. 6(1)(a) and 6(1)(f) GDPR).
• Retention: for as long as necessary to handle the inquiry and, at most, one year from the last contact.

2.5 Browsing and analytics

• Data: page visited, referring page, country, browser and device type, and load times. No cookies or identifiers that could recognize you on a later visit are used.
• Purpose: to understand, in aggregate, how the website is used in order to improve it, using Cloudflare Web Analytics.
• Legal basis: the legitimate interest in understanding how the website is used without affecting your privacy (Art. 6(1)(f) GDPR).
• Retention: only aggregated statistics are kept, for the period set by Cloudflare for this service.

In addition, the server hosting the website technically logs the IP address and request data to ensure the security and operation of the service (legitimate interest, Art. 6(1)(f) GDPR), for a short period.

3. Who has access to your data

Data is not sold or transferred to third parties. It is accessed only by the providers that deliver services necessary for the operation of the website, acting as data processors and with the safeguards required by the GDPR:

Where a provider is located outside the European Economic Area, the transfer is covered by its participation in the EU-U.S. Data Privacy Framework or by the standard contractual clauses approved by the European Commission.

If you click on links to Amazon, Instagram, LinkedIn, Facebook, WhatsApp or the websites of the owner's companies, you will move to third-party sites with their own privacy policies.

4. Your rights

You may exercise the following rights at any time:

• Access: to know which of your data is being processed.
• Rectification: to correct inaccurate or incomplete data.
• Erasure: to request that your data be deleted.
• Objection and restriction: to object to the processing or ask for it to be restricted.
• Portability: to receive your data in a structured format.
• Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.

To exercise them, write to hello@silviaroyolopez.com stating which right you wish to exercise. Proof of identity may be requested if there is reasonable doubt. A response will be given within one month.

If you believe the processing does not comply with the regulations, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es).

5. Minors

The services on this website are aimed at adults. Data from children under 14 is not knowingly collected. If you become aware that a minor has provided data, write to the address above and it will be deleted.

6. Security

Appropriate technical and organizational measures are applied to protect the data: encrypted communications (HTTPS), restricted access to the systems where it is stored, and providers with contractual confidentiality guarantees. No system is infallible; in the event of a security breach that poses a risk to your rights, you will be informed in accordance with the GDPR.

7. Changes to this policy

This policy may be updated to reflect legal changes or changes to the services of the website. The date of the latest revision appears at the top of the page.