Privacy Policy

Data controller

Controller: Joana Martínez Pardell (hereinafter “JoanaJob”).
Contact: joana@martinez.cat.

Purpose of processing

We process your data to:

  1. Manage contracting and delivery of services.

  2. Billing and administrative management.

  3. Communications related to the service (email and WhatsApp).

  4. Send commercial and training information about services and resources, only when you have given your consent.

Legal basis for processing

  • Performance of a contract for the provision of services (Art. 6.1(b) GDPR).

  • Consent of the data subject for marketing communications (Art. 6.1(a) GDPR), when applicable.

Categories of personal data processed

  • Identity and contact data: name, surname, email, telephone.

  • Professional data provided by the client: CV, work experience, training.

  • Payment data: handled by Stripe; the controller does not access full card details.

  • Other data provided by the client through forms or communications necessary to provide the service.

Processing and storage — providers (processors / sub-processors)

Data are stored and processed in: Gmail / Google Drive / Google Workspace, Stripe (payments), Hooba (website and forms), Canva (materials), WhatsApp Business (communications), and occasional use of AI tools for correction/translation (OpenAI / Google Translate) solely for linguistic support. Appropriate Data Processing Agreements (DPA) or equivalent guarantees are in place or will be arranged with each provider.

Retention period

  • Data will be retained during the contractual relationship and for 1 year after its termination for service follow-up.

  • Accounting and tax records will be kept for the legally required periods (for example, 4 years for tax purposes), per applicable law. (Adjust according to your accountant’s advice.)

Data subject rights (how to exercise them)

You may exercise the rights of access, rectification, erasure, restriction, objection and portability by emailing joana@martinez.cat with the subject “GDPR — exercise of rights” and attaching proof of identity. Requests will be processed within legal deadlines.

International transfers

If data are transferred outside the EU, you will be informed and adequate safeguards (standard contractual clauses or equivalent) will be applied. Major providers (Google, Stripe, Canva) provide appropriate contractual safeguards in their policies.

Security measures

Technical and organizational measures pursuant to Article 32 GDPR are implemented: access control, regular backups, encryption in transit where applicable, strong passwords and periodic verification processes to protect confidentiality, integrity and availability.

Processing of testimonials

Publication of testimonials requires express consent; you may withdraw consent at any time by emailing joana@martinez.cat. Testimonials will be published anonymously (e.g., “Senior – IT sector”) unless you explicitly authorise otherwise.

Contact and supervisory authority

If you consider your rights have been infringed, you can file a complaint with the Spanish Data Protection Agency (AEPD): https://www.aepd.es

Basic information about web data processing (required summary)

  • Controller: THE OWNER (details in the legal notice).

  • Purpose: to offer and manage products/services.

  • Legal basis: consent and performance of the contract.

  • Recipients: no disclosure to third parties unless required by law or necessary to fulfil the purposes.

  • Rights: access, rectification, erasure, restriction, objection, portability.

  • Retention: while the commercial relationship exists and for legal retention periods.

  • Complaints: data subjects may contact the supervisory authority.

Origin of the data

Personal data processed are provided by the data subject. The data subject warrants the truthfulness of the data and must notify any changes.

Contact for further information

For questions about this privacy policy or data processing, contact: joana@martinez.cat.