Privacy Policy

1. Data controller

The data controller for the personal data collected through this website is Aurelia Cirlo, tax ID [to be completed], contact email aurelia.cirlo@gmail.com. For any questions related to your personal data, you can write to this address.

2. Data collected

Depending on how you interact with this website, the following categories of data may be processed:

• Contact details (name, email) when you email us or book a session.
• Payment data, processed directly by Stripe; Aurelia Cirlo does not store or have access to your full card details.
• Booking data (date, time, email) when you schedule a session through Calendly.
• Basic, anonymous technical browsing data collected through Google Fonts.

3. Purpose of processing

Your data is used solely to manage the provision of the services requested: responding to your inquiries, processing session payments, confirming and reminding you of booked appointments, and maintaining the professional relationship necessary for therapeutic support.

4. Legal basis

Processing of your data is based on the execution of the contractual/pre-contractual relationship arising from your request for the services offered, as well as on your explicit consent when you voluntarily provide your data through the contact, payment, or booking forms.

5. Third-party platforms

Stripe is used for payment processing, and Calendly is used for scheduling. Both platforms act as data processors or independent controllers depending on the case, and have their own privacy policies, which we recommend reviewing: Stripe's privacy policy and Calendly's privacy policy.

6. Data retention

Your data will be kept for as long as necessary to provide the requested service, and afterward for the periods legally established to address any liabilities arising from processing.

7. Your rights

You can exercise your rights of access, rectification, deletion, objection, restriction of processing, and data portability at any time by writing to aurelia.cirlo@gmail.com. You also have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe the processing does not comply with applicable regulations.

8. Cookies and similar technologies

This website does not use its own tracking or advertising cookies. Loading typefaces through Google Fonts causes your browser to make a technical request to Google's servers, which may involve the transfer of your IP address. This request is strictly technical and necessary to correctly display the site's typography.

External platforms linked from this site (Stripe and Calendly) may use their own cookies when you access them, in accordance with their respective policies, independent of this website.

9. Security

Reasonable technical and organizational measures have been implemented to protect your personal data against unauthorized access, loss, or alteration, in accordance with the General Data Protection Regulation (GDPR) and applicable Spanish law.