Privacy policy

The data controller is Sandra Serra Tur, 47250423M, with registered address at C/ Pais Basc nº8 1º 1ª, 07800, Ibiza, 10001, Balearic Islands, Spain, Tel.: (+34)619 73 94 19 and contact email: info@fannyco.com.

If you require further information about the protection of your data, you may contact us at any time and by any means of contact.

We will only collect your personal data if you use the contact form (or the WhatsApp link) to contact us.

We also collect certain data through cookies. You can consult our cookie policy for more information.

Apart from these cases, we will not collect any personal information from website users.

If you use the contact form, you must provide your name, email address and, optionally, the reason for your communication.

The fields on the contact form marked with an asterisk (*) are mandatory. Without your identification and contact details, we will not be able to contact you or respond to any questions you may have.

If you use the WhatsApp link to contact us, we will collect your name, telephone number and the history of conversations we have using this contact method.

Please remember that when you provide your data, you are responsible for its accuracy and completeness, and you assume the consequences of any breach of this obligation.

If the information you have provided us with changes, please let us know as soon as possible so that we can rectify it.

We will use the data you have provided to:

1. Contact you and maintain contact until we have dealt with any queries you may have sent us via the contact form or WhatsApp link.
2. Remember your cookie consent options.
3. Send you information related to our products or services (if the box for sending advertising is enabled).
4. Remember the language you chose when visiting our website (only if multilingual).
5. Analyse user navigation on the website for statistical purposes.>

The legal basis that legitimises us to process your data is the free, specific, informed and unequivocal consent you give when you tick the option to consent to the processing of your data for the purpose of contact.

To store your cookie consent options, the legal basis we use is compliance with our legal obligations.

For the analysis of browsing data, the free, specific, informed and unequivocal consent you give by ticking the option to accept all or accept analytical cookies in the customise option in the cookie banner.

On certain occasions, your data must be communicated to third parties as a result of our legal obligations, such as, for example, to Public Authorities or Bodies for the exercise of their powers, or, if necessary, to the State security forces and bodies or to the Courts and Tribunals.

It will also be disclosed to third parties who provide us with services necessary to fulfil the purposes for which it was collected, always under our instructions and with the prohibition of using it for any other purpose (web hosting service providers, email providers, cookie consent management platform providers and web analytics service providers).

Outside of these situations, your data will not be communicated to third parties without first providing you with the necessary information and obtaining your express consent to do so.

As a general rule, data will be processed and stored on servers in the European Union.

However, accepting Google Analytics analytical cookies may involve an international transfer of data to the United States. This country has an adequacy decision and Google is a certified entity, which means that your data will have a level of protection equivalent to that which it would have if it were hosted in the European Economic Area.

Your data will be processed until we respond to the questions you have asked us via the contact form or the WhatsApp link, or until you withdraw your consent for its processing.

Once your questions have been answered, or after you have withdrawn your consent, we will keep your data blocked.

By blocking the data, we will proceed to identify and store it, adopting technical and organisational measures to prevent its use, including its display, except if we are required to do so by the courts, the Public Prosecutor's Office or any competent public administration, in particular the Data Protection Authorities, for the purpose of enforcing any liabilities arising from the processing of your data.

After the blocking period, we will completely delete your data. The blocking period, taking into account possible liabilities that may arise, may be a maximum of 1 year.

The retention periods for cookies are specified in our cookie policy. We will keep them for that period unless you decide to delete them earlier. In any case, they will not exceed one year.

Data protection laws grant you a series of rights that you can exercise with us, subject to certain conditions and limitations:

• Right to information: You have the right to know who we are and to obtain clear, concise, and understandable information about why your data is needed, how long we will keep it, how you can exercise your data protection rights, the legal basis that allows us to use your data, whether we intend to share it or transfer it to other countries, and whether we will use it to create profiles or make automated decisions. This information is described in this Privacy Policy. However, if you wish to receive more details, additional explanations, or if you have any concerns about the processing of your personal data, we will be glad to address your questions.
• Right of access: You have the right to know if we are processing your personal data and, if so, to receive information about: the categories of data we use about you, from whom we obtained them, the purposes for which we are using them, the legal basis that allows us to process them, to whom they will be communicated, whether we transfer data to third countries, whether we make automated decisions or create profiles with your data, which rights assist you and how to exercise them, including the right to file a complaint with the Spanish Data Protection Agency (AEPD).
• Right to object: You may object to our processing of your data for reasons related to your particular situation. In such cases, we will stop processing them unless we can demonstrate compelling legitimate grounds that override your rights (legitimate interest). You may also object when the processing is intended for direct marketing purposes.
• Right to rectification: You have the right to rectify inaccurate personal data and to request that incomplete data be completed.
• Right to erasure: You have the right to have your personal data erased in certain circumstances:
  • When they are no longer necessary for the purposes for which they were collected.
  • When you withdraw the consent you gave, provided there is no other legal basis justifying the processing.
  • When your data has been processed unlawfully.
  • When you have objected to its processing and our legitimate interest does not prevail, or if the processing is for direct marketing purposes.
  • When they must be deleted to comply with a legal obligation.
  • When they have been obtained from a minor in relation to information society services.

In some cases, this right may not apply, and we may have legal or legitimate reasons to retain your data, of which you will be informed.

• Right to restriction of processing: You have the right to request that we stop processing your personal data (although we may continue storing them) in certain circumstances:
  • When you contest their accuracy, for the period in which it is being verified.
  • When you object to processing, while verifying whether our legitimate interest prevails.
  • When the processing is unlawful, but you oppose erasure and instead request restriction.
  • When you need them for the establishment, exercise, or defense of legal claims.
• Right to data portability: You may receive the data you have provided to us through the contact form in a format that allows you to transmit them to another controller.
• Right to lodge a complaint with the Spanish Data Protection Agency (AEPD): If you believe that we have not duly addressed your requests regarding the exercise of your rights, you can contact the Spanish Data Protection Agency to file a complaint at: www.aepd.es, or at: Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001-Madrid.

You may exercise these rights through any of the channels we provide for you to contact us.

If we have reasonable doubts about your identity, we may ask you to provide us with additional information necessary to confirm it.

The exercise of your rights is free of charge, unless your requests are manifestly unfounded or excessive. We will respond within a maximum of one month, which may be extended by a further two months depending on the complexity or number of requests you send us.

The information we have provided has been updated in August 2025. It may be modified: if this happens, we will notify you of the changes, which will take effect from the date of publication.