Welcome, and thank you for reading what is and is not done with your personal data on this website.
This policy explains how the personal information of everyone who interacts with Diego Carmona Vallinot through this website is processed and protected. Please read the Legal Notice, the Cookie Policy and this Privacy Policy before using this website.
This policy is issued in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights.
Controller: Diego Carmona Vallinot
Trading name: Diego Carmona
Spanish Tax ID (NIF): 50179 O67J
Address: C/ Petunia, 18 – 28933 Móstoles (Madrid), Spain
Email: diego@diegocarmona.com
Telephone: +34 636 125 760
Activity: Training, advisory and consulting services in foreign trade, international trade and international transport.
Data Protection Officer: no Data Protection Officer has been appointed, as none of the circumstances set out in Article 37 of the GDPR apply. For any question relating to data protection, please write to diego@diegocarmona.com.
For the purposes set out in this policy, the following categories of personal data are collected and processed, depending on the products or services you request:
Identification data: first name, surname.
Contact data: postal address, email address, telephone number.
Contractual data: contractual transaction details, identity document number, products and services purchased, financial transactions, payment data.
Browsing data: IP address, device type and identifier, browser type, the domain through which you access the website, browsing data and activity on the website.
Only the data strictly necessary for each purpose is collected. Fields marked as mandatory in each form must be completed; if they are not, the requested service cannot be provided. No data is obtained from third-party sources.
Performance of a contract: for purchasing services, and for managing the services requested.
Your consent: for contact requests, subscription to content, the sending of commercial communications by email or messaging systems, the use of non-essential cookies, and profiling.
Legitimate interest: to protect the users of this website from abuse and fraud in the use of its services, and to send commercial communications about similar products and services to existing customers, in accordance with Article 21.2 of Spanish Law 34/2002 (LSSICE). You may object to this at any time.
Compliance with a legal obligation: for the retention of accounting, tax and invoicing records.
This website contains several forms. The information collected through each is used as follows:
Content subscription forms: the data provided is used exclusively to send the newsletter and to keep you up to date with news and occasional offers available only to subscribers of diegocarmona.com.
Comment form: the personal data entered is used exclusively to moderate and publish the comments.
Contact form: for enquiries, suggestions or professional contact. The email address is used to reply and to send the information you request.
Registration form: name and email are requested so that you can create an account and access its features.
Purchase form: data is processed to manage the purchase of the products or services offered, including order management, payment and all operations related to the contract for the service or product chosen. This includes sending follow-up emails, replies, invoices and receipts.
Affiliate registration form: affiliate data, including payment details, is requested in order to process affiliate registrations and to settle the corresponding commissions.
Downloads: various content is made available for download in text, video and/or audio format. An email address is required to activate the subscription form, and the information is used for the purposes indicated for subscribers.
Customer data: the retention period varies depending on the service purchased. It will always be the minimum necessary, and may extend to:
– 4 years: Spanish Law on Infringements and Penalties in the Social Order (obligations relating to social security registration, contributions, payment of wages, etc.) and Articles 66 et seq. of the General Tax Law.
– 5 years: Article 1964 of the Spanish Civil Code (personal actions with no special limitation period).
– 6 years: Article 30 of the Spanish Commercial Code (accounting records, invoices, etc.).
– 10 years: Article 25 of the Spanish Law on the Prevention of Money Laundering and Terrorist Financing, where applicable.
Subscriber data: from the moment of subscription until the user unsubscribes.
Prospective customer data: retained for the duration of the commercial relationship and, once it has ended, for two years, unless erasure is requested earlier.
Anyone has the right to obtain confirmation as to whether or not their personal data is being processed.
Data subjects have the right to:
To exercise these rights, write to diego@diegocarmona.com. A request form is available on request by email; you may also use the forms produced by the Spanish Data Protection Agency.
Requests must be accompanied by a copy of an identity document or be signed electronically, solely so that your identity can be verified. Where someone acts on your behalf, a copy of their identity document and evidence of their authority must also be provided. Requests may be submitted in person, by post or by email to the address given above.
A response will be given within one month, extendable by a further two months where the request is complex.
If you believe your data protection rights have been infringed, particularly where you have not obtained satisfaction in exercising them, you may lodge a complaint with the Spanish Data Protection Agency at www.aepd.es, or with the supervisory authority of your country of residence.
Many of the tools used on this website to manage data are provided by third parties. To provide services strictly necessary for the running of the business, data is shared with the following providers, each under a data processing agreement and their respective privacy terms:
External service providers (payment processing, order processing, analytics, marketing campaign management, website management, email distribution and similar services) so that they can perform business functions on behalf of Diego Carmona Vallinot.
The web development and maintenance company and the hosting provider may occasionally access this website. Both have signed a service agreement requiring them to maintain the same level of privacy applied to the processing carried out on this website.
Data may also be disclosed to public authorities, courts and tribunals where there is a legal obligation to do so.
Specifically, this website uses the following tools:
Email marketing and newsletters: newsletters are managed by MailerLite (UAB MailerLite, Lithuania). See their privacy policy and GDPR information.
Analytics: Google Analytics, a web analytics service provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland) for users in the European Economic Area. Google Analytics uses cookies to help analyse how users use this website. IP addresses are anonymised. See Google’s privacy policy.
Hosting: Webempresa Europa S.L., with servers located in Spain. See their legal information.
The connection between your browser and this website is encrypted using an SSL/TLS certificate, so that data transmitted between the server and the user travels privately.
Advertising platforms: Meta Platforms Ireland Ltd. (Facebook and Instagram), Google Ireland Ltd. (Google Ads) and LinkedIn Ireland Unlimited Company, where advertising campaigns are run. See the Cookie Policy for details.
Website platform: WordPress. See wordpress.org.
Some of the providers listed above belong to corporate groups established in the United States. Where personal data is transferred outside the European Economic Area, those transfers are covered by the European Commission’s adequacy decision of 10 July 2023 on the EU–US Data Privacy Framework, where the provider is certified under it, and/or by the Standard Contractual Clauses approved by the European Commission, together with any additional safeguards required.
You may request further information, and a copy of the relevant safeguards, by writing to diego@diegocarmona.com.
Google Ads
This website may use Google Ads, Google’s advertising platform, to create campaigns and display advertisements on other websites. When an advertisement is created, the audience may be segmented by location, demographic data (age, gender), interests, and purchasing behaviour online and through other channels.
Data obtained through Google Ads is subject to this Privacy Policy from the moment the user submits their data in a form on this website in order to join the newsletter. Information obtained from Google will never be used for any other purpose.
Meta Ads (Facebook and Instagram)
This website may use Meta Ads, which allows audiences to be segmented in order to target an advertisement.
Using the custom audiences feature, an audience may be built from data relating to users and subscribers of this website, such as email addresses and telephone numbers. This requires sharing data with Meta in order to create custom audiences and target advertising at people with similar profiles. This is done only with your consent, which you may withdraw at any time.
In accordance with Meta’s policies, no special categories of personal data are used for advertising segmentation. Data is not shared with other advertisers and is deleted by Meta once the process is complete.
Meta’s advertising system makes it possible to show relevant advertising without revealing your identity to advertisers, by reaching groups of people with particular profiles.
You may withdraw your consent at any time through your Meta ad settings. You may also opt out of interest-based advertising from Meta and other companies through the European Interactive Digital Advertising Alliance at www.youronlinechoices.com, or in your computer or mobile device settings.
Meta conversion tracking pixel
To optimise advertising campaigns published on Meta platforms, and for statistical purposes, the Meta conversion tracking pixel (Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland) may be used to track the actions taken by users after clicking on an advertisement.
The data obtained through the pixel does not identify individuals to this website, and no profiles are created here using your personal data. That data may be stored and processed by Meta, which may link it to your Meta account and use it for its own advertising purposes in accordance with its privacy policy.
The pixel is only loaded if you accept advertising cookies in the cookie banner.
LinkedIn Ads
This website may use LinkedIn Ads to create campaigns and advertisements, with audiences segmented by location, demographic data, interests and purchasing behaviour. Data obtained through LinkedIn Ads is subject to this Privacy Policy from the moment the user submits their data in a form on this website in order to join the newsletter. Information obtained from LinkedIn will never be used for any other purpose.
The personal data provided when subscribing, making contact or interacting with the website, along with any other data supplied while browsing, including information supplied by cookies about browsing habits, may be used to segment or categorise users for the purposes of general administration, information, the sale of advertising space, the analysis of requests submitted by users and customers, statistical study of the services and content used, preferences, and surveys or forms.
Profiling consists of using your personal data to evaluate certain personal aspects, such as preferences, interests, behaviour and location. The logic applied is based on statistical procedures, and the consequence of this processing is the sending of personalised communications with content related to the activity described at the beginning of this policy.
The legal basis for this processing is the consent you give when subscribing or when accepting advertising cookies. You may withdraw that consent at any time by writing to diego@diegocarmona.com or through the cookie settings link in the footer of this website.
No decisions are taken that produce legal effects concerning you, or that similarly significantly affect you, based solely on automated processing.
The data used in profiling and shown to advertisers does not identify individual users; it is presented only as aggregate figures on the type of audience, age, country and gender.
This website may offer users sponsored content, advertisements and/or affiliate links, including references to third-party products, services and digital products.
The information appearing in these affiliate links or advertisements is supplied by the advertisers themselves. diegocarmona.com is therefore not liable for any inaccuracies or errors they may contain, and cannot offer guarantees as to the experience, integrity or accountability of advertisers, or the quality of their products or services.
Advertisements will remain published until removed or suspended by the advertiser or by diegocarmona.com, which is not responsible for advertisements continuing to be indexed by external search engines after removal from its own databases.
Any contractual or non-contractual relationship between the user and advertisers, affiliates or third parties contacted through this website is established solely between the user and that advertiser or third party. diegocarmona.com acts only as an advertising channel and therefore bears no liability for damages of any kind arising from those dealings.
diegocarmona.com undertakes to use and process users’ personal data in accordance with the purposes described, respecting its confidentiality, and to comply with its obligation to keep it secure and to adopt all measures necessary to prevent its alteration, loss, unauthorised processing or unauthorised access, in accordance with applicable data protection legislation.
This website uses an SSL/TLS certificate, a security protocol that encrypts the transmission of data between the server and the user.
diegocarmona.com cannot, however, guarantee that the internet is absolutely impregnable, nor therefore that data will never be breached through fraudulent access by third parties.
Anyone authorised by Diego Carmona Vallinot to process customer data, including staff, collaborators and service providers, is bound by an appropriate obligation of confidentiality, whether contractual or statutory.
Appropriate security measures are applied, proportionate to the level of risk, to protect personal information against loss, misuse, unauthorised access, disclosure, alteration and destruction.
In the event of a personal data breach, the Spanish Data Protection Agency will be notified without undue delay and, where feasible, within 72 hours of becoming aware of it, in accordance with Article 33 of the GDPR. Where the breach is likely to result in a high risk to your rights and freedoms, you will also be informed without undue delay, in accordance with Article 34.
As a user, you are solely responsible for the truthfulness and accuracy of the data you submit to diegocarmona.com.
Users warrant the accuracy, currency and authenticity of the personal data they provide, and undertake to keep it duly updated.
The user agrees to provide complete and correct information in the contact and subscription forms.
The services offered on this website are intended for persons over 18 years of age. Personal data is not knowingly collected from minors. If you become aware that a minor has provided personal data through this website, please write to diego@diegocarmona.com so that it can be deleted.
Consent given, both for processing and for the disclosure of data, may be withdrawn at any time by notifying Diego Carmona Vallinot, on the terms set out in this policy for the exercise of your rights. Withdrawal does not have retroactive effect and does not affect the lawfulness of processing carried out before it.
Diego Carmona Vallinot reserves the right to amend this policy in order to bring it into line with legislative or case-law developments and with industry practice. In such cases, the changes will be announced on this page with reasonable notice before they take effect.
This Privacy Policy was last updated on 30 September 2026.
This English version is a translation provided for information purposes. In the event of any discrepancy, the Spanish version available at https://diegocarmona.com/politica-de-privacidad/ shall prevail.