1. Who is responsible for your personal data?
Maryem Sader, a self-employed professional (autónoma) established in Spain, is the controller of the personal data described in this policy.
- Name
- Maryem Sader
- NIF
- 53940635T
- Location
- Majadahonda, 28220 Madrid, Spain
- Privacy email
- privacy@maryemsader.com
2. Scope of this policy
This policy explains how personal data is handled when you visit maryemsader.com, contact Maryem, arrange a meeting, enquire about services or work with Maryem on a project. The website is informational and does not currently contain contact forms, a newsletter, payment facilities or embedded booking tools.
3. Personal data collected
- Contact and identity information, normally your name and email address.
- Correspondence and enquiry information that you choose to provide by email or during a meeting.
- Booking information provided through Calendly, such as your name, email address and meeting time.
- Client and project information needed to plan, deliver and document agreed services.
- Audio, video and the content of a Zoom call when the call is recorded. Recording begins only after participants have been informed and have agreed.
- Limited technical information generated by the website host for security and operation, such as request, device or log information, where applicable.
Please do not send sensitive personal data or confidential third-party information unless it is necessary for an agreed project and an appropriate method has been arranged.
4. How the information is collected
- Directly from you when you email, book a meeting, speak with Maryem or become a client.
- From Calendly when you choose to use its external booking service.
- From Zoom when an agreed project call is recorded.
- Automatically by the website host where strictly necessary to provide, protect and maintain the website.
5. Purposes and legal bases
Enquiries and meetings
Your information is used to respond to your enquiry, arrange a meeting and take steps you request before entering into a contract. The legal basis is taking pre-contractual steps at your request. Where the enquiry is made on behalf of an organisation, the legal basis may also be the legitimate interest in responding to relevant business communications.
Client and project work
Information is used to agree, manage, deliver and document services, communicate about the project and maintain appropriate business records. The legal bases are performance of a contract, compliance with legal obligations and legitimate interests in administering the business and establishing, exercising or defending legal claims.
Recorded project calls
A Zoom call may be recorded when the recording is an important project record. Participants are told before recording begins and are asked to agree. The legal basis for making the recording is consent. A participant may decline recording; where practicable, written notes or another reasonable alternative will be used. Consent can be withdrawn for future processing, although information may still be retained where required to establish, exercise or defend legal claims.
Website security and operation
Limited technical data may be processed where necessary to operate and secure the website. The legal basis is the legitimate interest in providing a secure and reliable website.
No advertising or automated decisions
Personal data is not sold. It is not used for behavioural advertising, automated decision-making or profiling that produces legal or similarly significant effects. There is currently no newsletter.
6. Service providers and other recipients
Personal data may be processed by carefully selected providers used to operate the business, including:
- Calendly, when you choose to book a meeting on Calendly’s external website.
- Google, for business email, calendar and file storage, as configured.
- Zoom, for online meetings and agreed recordings.
- OpenAI/ChatGPT Sites and relevant infrastructure providers, for website hosting and operation.
- Professional advisers, such as legal, tax or accounting advisers, where reasonably necessary.
- Public authorities or courts where disclosure is required by law.
Providers are permitted to process information only for the relevant service and subject to their applicable contractual and legal obligations.
7. International processing
Some providers may process personal data outside Spain or the European Economic Area, including in the United States. Where required, transfers are protected by an applicable adequacy decision or appropriate safeguards such as the European Commission’s standard contractual clauses, together with supplementary measures where necessary. Further information about a relevant safeguard may be requested at privacy@maryemsader.com.
8. Retention
Personal data is kept only for as long as necessary for the purpose for which it was collected and to meet applicable legal or claims-related requirements.
At the end of the applicable period, information will be securely deleted, anonymised or restricted from ordinary use where it must be preserved for a legal reason.
9. Your rights
Depending on the applicable law, you may have the right to request access to your personal data, correction, deletion, restriction, objection and portability. Where processing is based on consent, you may withdraw consent at any time without affecting processing that was lawful before withdrawal.
To exercise a right, email privacy@maryemsader.com and describe your request. Additional information may be requested only where reasonably necessary to verify identity.
You may lodge a complaint with the Spanish Data Protection Agency (AEPD) at aepd.es. If the UK GDPR applies to your information, you may also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk. Individuals in the United States may contact Maryem about rights available under applicable state privacy law. Maryem does not sell personal data or share it for cross-context behavioural advertising.
10. Security
Reasonable technical and organisational measures are used to protect personal data, including access controls, account security and limiting access to information needed for the relevant work. No internet or storage system can be guaranteed completely secure.
11. External websites
The website contains links to external services such as Calendly and LinkedIn. Those services operate their own websites and privacy practices. Their policies apply after you choose to follow an external link.
12. Changes to this policy
This policy may be updated when the website, services or legal requirements change. The current version and its update date will be published on maryemsader.com.
13. Contact
Questions about this policy may be sent to privacy@maryemsader.com.