Privacy Policy


Last updated: August 16th, 2026

In compliance with Regulation (EU) 2016/679 (GDPR) and Spain's Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD), here's how I handle your personal data when you use patriciaordonez.com.

1. Data Controller

  • Owner: Patricia Carolina Ordoñez López

  • Tax ID (NIF): 61725982P

  • Address: Calle de Jesús 49-21, Valencia, 46007. Spain

  • Contact email: admin@holarara.com

2. What data I collect and why

Source

Data

Purpose

Legal basis

Contact form (Framer)

Full name, email, website (if any), social media handle, service of interest, budget range, additional information

Reply to your enquiry

Consent (Art. 6.1.a GDPR)

Call scheduler (Moxie)

Name, email, meeting details, website/social media links, service of interest, "North Star" goal, project deadline, questions to clarify on the call, how you heard about me, videocall confirmation, additional information

Manage the booking

Performance of pre-contractual steps (Art. 6.1.b GDPR)

3. Who I share your data with

I use an external provider acting as a data processor, under the corresponding data processing agreement (or equivalent clauses in their terms of service):

  • Moxie (CRM and call scheduling)

I do not sell or share your data with third parties for purposes unrelated to this service.

4. International transfers

Moxie may be based outside or transfer data outside the European Economic Area (e.g. to the US). In that case, the transfer relies on the European Commission's Standard Contractual Clauses (SCCs) or another adequacy mechanism recognized under the GDPR.

5. Retention period

I keep your data for as long as a contractual or business relationship is active, and afterward for the legally required periods (tax, accounting). Contact data is kept until you request its deletion.

6. Your rights

You can exercise your rights at any time to:

  • Access know what data I hold about you

  • Rectification correct inaccurate data

  • Erasure request deletion of your data

  • Objection object to a specific processing activity

  • Restriction limit how your data is used

  • Portability receive your data in a structured format

To exercise these rights, email [YOUR EMAIL] stating which right you want to exercise and attaching a copy of an ID document.

If you believe your request hasn't been properly handled, you can file a complaint with the Spanish Data Protection Agency (AEPD) www.aepd.es.

7. AI transparency

Since August 2, 2026, Article 50 of the EU AI Act requires disclosure whenever AI is used to generate content or interact with users. In line with this:

  • AI-assisted content: Some content on this site (copy, drafts, or visuals) may be created or assisted by AI tools as part of my design workflow. Final work is reviewed and approved by me before publication.

  • No automated decision-making: I don't use AI to make automated decisions that produce legal or similarly significant effects about you.

8. Changes to this policy

I may update this policy to reflect legal changes or changes to my providers. The "last updated" date at the top reflects the latest revision.

Got questions?

If you have any questions, or if you simply want to work with me, please contact me below.

Copyright 2026

Copyright 2026