Privacy policy

Data controller

Abalola, S. L. · Identificación fiscal: B22714786
Registered address: Carrer de Gresolet, 15, 08034 Barcelona, España.
Contact: [email protected].

Data, purposes and legal bases

• Enquiries and bookings: name, email address, telephone number, professional details, your store's website and anything you include in your message. We use this information to reply, organise the audit and prepare a proposal. The legal basis is dealing with your request for pre-contractual measures; for other enquiries, our legitimate interest in replying to whoever contacts us. When you book, we create or update a contact record in HighLevel/LeadConnector to handle your enquiry and appointment reminders; this does not subscribe you to marketing communications.
• Client relationship: contact, contracting and billing data in order to provide the agreed services and comply with legal obligations.
• Applications: the data in the CV, portfolio and messages sent to [email protected] are used to assess your application and to manage the selection process, as a pre-contractual measure requested by you. Retention for future vacancies will require your consent.
• Newsletter: if you subscribe from the footer, we process your name and your email address in order to send you the requested content about Abalola. The legal basis is your consent, which you can withdraw from the unsubscribe link in each message or by writing to us. We manage it with Klaviyo. Booking an audit does not subscribe you.
• Browsing, analytics and marketing: with your consent, Google Analytics and Microsoft Clarity measure website use, including session recordings with strict masking. Google Ads and Meta Pixel tags load only if you accept marketing. Klaviyo recognises your browser to personalise communications only if you accept marketing. You can reject these technologies or change your mind from the preferences panel. See the cookie policy.

The data come from what you send us and, where applicable, from the technologies you authorise. Providing the data needed to reply or to book is voluntary, but without them we will not be able to deal with the request. Please avoid sending sensitive data or third-party information that is not necessary.

Retention

We keep enquiries and bookings for as long as we are dealing with them and managing any relationship that results from them. Contractual and billing documentation is kept for the duration of the relationship and for the applicable legal periods. When a selection process ends, the data cease to be used for that process; they will only be kept for future vacancies with your authorisation.

Newsletter data will be used until you withdraw your consent. We may keep the minimum information necessary to respect your unsubscription and to evidence the obligations fulfilled. Where applicable, the data will be kept blocked during the liability periods and will be erased once these have ended. The expiry of a cookie is different from the retention period of the data sent to the provider.

Recipients and providers

The data may be accessed by the necessary hosting, email, management and advisory providers, to the extent necessary to provide their services, and by public authorities where there is a legal obligation.

We use HighLevel/LeadConnector to manage bookings, contact records and appointment reminders. HighLevel describes how it processes data on behalf of its customers in its data processing agreement.

We use Klaviyo, Inc. to manage the newsletter you subscribe to and consented tracking; Google Ireland Limited for Google Analytics 4 and Google Ads; Microsoft Corporation for Microsoft Clarity; and Meta Platforms Ireland Limited for Meta Pixel. Google Analytics and Clarity only receive data if you accept analytics. Google Ads and Meta Pixel tags load only if you accept marketing. Booking an audit does not subscribe you to the newsletter. See the documentation of Klaviyo, Google, Microsoft and Meta.

International transfers

Klaviyo, Microsoft, Google, Meta and HighLevel/LeadConnector may process data in the United States or other countries outside the European Economic Area. Transfers are covered by an applicable adequacy decision, such as the EU-US Data Privacy Framework where the entity is certified, or by safeguards such as the standard contractual clauses and any additional measures that may apply. You can request information about the safeguards applicable to your data by writing to [email protected].

You can consult the Klaviyo data processing agreement, the Google transfer frameworks and the Microsoft transfer commitments. HighLevel describes its transfer mechanisms in its data processing agreement.

Your rights

You can request access, rectification, erasure, objection, restriction of processing and portability where applicable, as well as withdraw your consent. Write to us at [email protected] or to the address indicated, explaining your request. We will only ask for additional identification information if it proves necessary.

Withdrawal does not affect the lawfulness of the processing carried out beforehand. We will reply, as a general rule, within one month; if there is a legal extension because of complexity or the number of requests, we will inform you. You can also lodge a complaint with the Spanish Data Protection Agency (AEPD).

Profiling and automated decisions

With your consent, Klaviyo may group interests and interactions in order to personalise our communications, and analytics produces aggregate usage statistics. The website does not incorporate decisions based solely on automated processing that produce legal effects or similarly affect you. Any relevant change in the purposes will be communicated before a different processing operation is applied.