Privacy policy

1. Controller

Bettina Zimmermann – IRTAVIA · Camino Malentivet 26 · 12579 Alcossebre (Castellón), Spain · Email: info@irtavia.com · Telephone: +34 623 274 591.

2. Website access and hosting

When you access the website, technically necessary connection data may be processed, including IP address, date and time, requested page, data volume, browser and device information and referring page. This supports secure, stable delivery, error analysis and misuse prevention.

On your first visit to the main address, the preferred language supplied by your browser is used to show an available version. If you choose another language, a functional cookie stores that choice for one year. You can change it at any time using the language selector. Further details are in the cookie policy.

The legal basis is Article 6(1)(f) GDPR and the legitimate interest in operating a secure website. The current site uses OpenAI Sites on Cloudflare infrastructure; these providers may process connection and log data as processors or subprocessors. Migration to STRATO is planned for the later production service. Logs are retained only as long as necessary for security, diagnostics and legal evidence.

3. Contact

When you contact IRTAVIA by email, telephone or form, your contact details and enquiry are processed to respond. The form sends your name, email, subject, message and current website language to the server. Brevo acts as a processor to forward the enquiry to IRTAVIA and send one automated acknowledgement. The data is not added to the newsletter list without separate consent.

Contractual or pre-contractual enquiries are processed under Article 6(1)(b) GDPR; other enquiries under Article 6(1)(f) GDPR based on the legitimate interest in responding. Enquiries are deleted after completion unless retention duties or legitimate evidentiary interests apply.

4. Newsletter

When you subscribe, IRTAVIA processes your email address, subscription and confirmation times and technical proof-of-consent data. The newsletter is sent only after double-opt-in confirmation. The legal basis is consent under Article 6(1)(a) GDPR together with electronic-marketing rules.

Brevo, part of the Sendinblue/Brevo group, is used as processor for registration, proof and delivery. Registration is sent server-side and the secret key is not exposed to the browser. IRTAVIA does not initially use open or reach tracking. Any later feature will first undergo the required privacy review and, where necessary, consent.

You may withdraw consent at any time through the unsubscribe link or by emailing info@irtavia.com. Withdrawal does not affect earlier processing. The address is removed from the active list; a minimal suppression record may remain to prevent further mail. Unconfirmed registrations and consent evidence are retained only for appropriate or legally necessary periods.

5. Instagram

The website contains only an external link to IRTAVIA’s Instagram profile and no embedded plugin. A connection to Instagram or Meta is made only when you open the link; the provider’s privacy terms then apply.

6. Recipients and transfers

Data is received only by parties that need it for the stated purposes, such as OpenAI Sites, Cloudflare, email providers and Brevo. Required processor agreements are concluded. Transfers outside the European Economic Area occur only where Articles 44 et seq. GDPR are satisfied.

7. Your rights

Subject to legal requirements, you may request access, rectification, erasure, restriction, portability and object to processing, and may withdraw consent for the future by emailing info@irtavia.com.

You may also complain to a supervisory authority, in particular the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid, Spain – www.aepd.es ↗.

8. Required data and automated decisions

You are not obliged to provide personal data, although an enquiry may not be processed without necessary information. IRTAVIA makes no solely automated decisions, including profiling, within Article 22 GDPR.

9. Updates

This policy will be adapted when functions, providers or legal requirements change. The linked shop has its own privacy policy for the purchasing process.