Privacy Policy
Last updated: August 16th, 2026
In compliance with Regulation (EU) 2016/679 (GDPR) and Spain's Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD), here's how I handle your personal data when you use patriciaordonez.com.
1. Data Controller
Owner: Patricia Carolina Ordoñez López
Tax ID (NIF): 61725982P
Address: Calle de Jesús 49-21, Valencia, 46007. Spain
Contact email: admin@holarara.com
2. What data I collect and why
Source
Data
Purpose
Legal basis
Contact form (Framer)
Full name, email, website (if any), social media handle, service of interest, budget range, additional information
Reply to your enquiry
Consent (Art. 6.1.a GDPR)
Call scheduler (Moxie)
Name, email, meeting details, website/social media links, service of interest, "North Star" goal, project deadline, questions to clarify on the call, how you heard about me, videocall confirmation, additional information
Manage the booking
Performance of pre-contractual steps (Art. 6.1.b GDPR)
3. Who I share your data with
I use an external provider acting as a data processor, under the corresponding data processing agreement (or equivalent clauses in their terms of service):
Moxie (CRM and call scheduling)
I do not sell or share your data with third parties for purposes unrelated to this service.
4. International transfers
Moxie may be based outside — or transfer data outside — the European Economic Area (e.g. to the US). In that case, the transfer relies on the European Commission's Standard Contractual Clauses (SCCs) or another adequacy mechanism recognized under the GDPR.
5. Retention period
I keep your data for as long as a contractual or business relationship is active, and afterward for the legally required periods (tax, accounting). Contact data is kept until you request its deletion.
6. Your rights
You can exercise your rights at any time to:
Access — know what data I hold about you
Rectification — correct inaccurate data
Erasure — request deletion of your data
Objection — object to a specific processing activity
Restriction — limit how your data is used
Portability — receive your data in a structured format
To exercise these rights, email [YOUR EMAIL] stating which right you want to exercise and attaching a copy of an ID document.
If you believe your request hasn't been properly handled, you can file a complaint with the Spanish Data Protection Agency (AEPD) — www.aepd.es.
7. AI transparency
Since August 2, 2026, Article 50 of the EU AI Act requires disclosure whenever AI is used to generate content or interact with users. In line with this:
AI-assisted content: Some content on this site (copy, drafts, or visuals) may be created or assisted by AI tools as part of my design workflow. Final work is reviewed and approved by me before publication.
No automated decision-making: I don't use AI to make automated decisions that produce legal or similarly significant effects about you.
8. Changes to this policy
I may update this policy to reflect legal changes or changes to my providers. The "last updated" date at the top reflects the latest revision.
Got questions?
If you have any questions, or if you simply want to work with me, please contact me below.