Privacy policy

This policy explains which personal data I collect, what I use it for and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

Data controller

• Controller: Francesc Pàez Falomir
• Tax ID (NIF): 47855949x
• Address: Santiago Russinyol 20, 43740 Mora Ebre (Tarragona)
• Email: info@tarotdefran.com

What data I process and why

When	Data	Purpose	Legal basis
You request a reading	Name or nickname, email and your question	To do the reading, send you the answer and manage the payment	Performance of a contract (art. 6.1.b GDPR)
You pay	Transaction data (amount, date and reference)	To meet accounting and tax obligations	Legal obligation (art. 6.1.c GDPR)
You write via the contact form	Name, email, subject and message	To reply to your message	Your consent (art. 6.1.a GDPR)
You browse the site	Cookie identifiers and browsing data	To show Google AdSense adverts	Your consent (art. 6.1.a GDPR), managed in Google's consent notice

Messages and questions are sent by email to info@tarotdefran.com. A reading request is only stored on the server while payment is completed: as soon as it is confirmed it is sent by email and deleted, and if it is not paid it is deleted after 2 days.

How long I keep your data

Messages and questions are kept for as long as needed to reply to you and are deleted once the conversation has ended, after one year at most. Payment data is kept for the periods required by tax law.

Recipients

I do not share your data with third parties unless legally required. The following providers are involved:

• Web hosting and email: Hostsuar.com, with servers in the European Union.
• Stripe Payments Europe, Ltd. (Ireland), for card payments. Stripe may transfer data outside the European Economic Area with GDPR safeguards.
• Google Ireland Ltd., to show Google AdSense adverts. More information on how Google uses data in advertising.

Google may transfer data outside the European Economic Area with the safeguards provided for in the GDPR (EU-US Data Privacy Framework and standard contractual clauses).

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to info@tarotdefran.com. You can withdraw your consent at any time. If you believe your rights have not been properly respected, you can file a complaint with the Spanish Data Protection Agency (AEPD).

Security

The site uses an encrypted connection (HTTPS) and messages are sent through an authenticated mail server.