Privacy Policy

1. Identity of the Data Controller

This website (clipscoutchoicecabn.makeup) is owned and operated by Clipscout Choice Analytics S.L., a corporate entity registered in Spain with Company CIF B-87941203 and registered offices at Calle del Barquillo 19, 2º Izquierda, 28004 Madrid, Spain ("the Company", "we", "us", or "our").

Our designated Data Protection Officer (DPO) can be contacted directly at [email protected] for any questions concerning your personal data rights under European Union regulation.

2. Scope and Information We Collect

We believe in minimal data processing. We do not operate customer account profiles or request social credentials. We collect and process personal information exclusively under the following circumstances:

• Voluntary Form Submissions: When you send inquiries via our contact form, we collect your name, email address, topic category, and message body.
• Server Telemetry Logs: For network security and service continuity, our web server logs standard request headers, including masked IP addresses, browser user agent strings, and referrers.
• Technical Preference Storage: We record your cookie consent choice locally on your machine via localStorage to respect your preferences across visits.

3. Legal Bases for Processing (GDPR Article 6)

We process your data only where lawful grounds apply:

• Legitimate Interest (Art. 6(1)(f)): Maintaining server integrity, preventing malicious spam attacks, and diagnosing technical layout errors.
• Consent (Art. 6(1)(a)): Replying to voluntary inquiries submitted via our contact channel and storing non-essential functional preferences.
• Legal Compliance (Art. 6(1)(c)): Retaining transaction and correspondence records where mandatory under applicable Spanish corporate regulations.

4. Third-Party Processors and Hosting

Our static web infrastructure is served through security-hardened EU-based cloud nodes that comply with ISO 27001 standards. We do not sell, rent, or lease personal identifiers to external data brokers or behavioral marketing platforms. Any processor handling telemetry metrics does so under strict Data Processing Agreements guaranteeing GDPR equivalence.

5. International Data Transfers

All core server nodes and database backups reside within the European Economic Area (EEA). If an edge CDN node processes traffic outside the EEA, standard contractual clauses approved by the European Commission are applied to safeguard data integrity.

6. Retention Schedules

Contact form submissions are retained in our operational inbox for up to 180 days following resolution of the query, after which they are systematically purged. Server access log metrics are cycled and permanently deleted every 30 days.

7. Your Rights under GDPR and CCPA/CPRA

Depending on your geographic residency, you maintain enforceable rights regarding your personal information:

• Right of Access: Request a complete record of data held concerning your identity.
• Right to Rectification: Request correction of erroneous or outdated records.
• Right to Erasure: Request the deletion of data when no overriding statutory retention mandate applies.
• Right to Restriction and Objection: Oppose processing based on legitimate interests.
• Right to Non-Discrimination: We do not alter service access based on whether you exercise privacy rights.

To submit a verified data subject request, email [email protected] with the subject line "GDPR Data Subject Request". We respond within 30 calendar days without levying fees.

8. Right to Lodge a Regulatory Complaint

If you believe our data handling practices violate applicable European privacy frameworks, you have the statutory right to file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) at Calle Jorge Juan 6, 28001 Madrid, or via their official portal at www.aepd.es.