Privacy
This Privacy Policy describes how Pedrosa collects, uses, stores and protects the personal data of users of the website pedrosa.uk, in compliance with the UK General Data Protection Regulation and the Data Protection Act 2018, with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD) where Spanish law applies, and with other applicable legislation.
1. Data controller
Pedrosa is a trading name of RPL Ventures Ltd., a company registered in England and Wales, no. 12413984, with registered office at 19 The Circle, Queen Elizabeth Street, London SE1 2JE, United Kingdom, and of Paloma Cap, S.L., a company registered in the Registro Mercantil de Valencia, NIF B88673892, with registered office at Plaza del General Santes 4, Bajo 2, 46160 Llíria, Valencia, Spain. RPL Ventures Ltd. is the data controller for this website. The contact channel for any privacy-related query or request is contact@pedrosa.uk. Neither company is required to appoint a Data Protection Officer, as they do not engage in large-scale processing of special categories of data nor in systematic monitoring of data subjects.
2. Personal data we collect
This website has no contact forms, no newsletter and no user accounts. It sets no cookies, and its fonts, images and documents are served from this domain. Audience measurement is provided by Vercel Web Analytics, which counts page views without cookies, without fingerprinting and without storing any personal data: visitors are not identified and cannot be tracked across sites. The only personal data we process are those you send us yourself by email to contact@pedrosa.uk: your name, your email address and the content of your message. We do not collect special categories of personal data nor data relating to criminal convictions or offences.
3. Purposes and legal bases
We process your data to reply to your enquiry and, where applicable, to prepare and perform an engagement with you or your company (pre-contractual measures and performance of a contract); to maintain professional relationships with clients, journalists and market contacts (legitimate interest in business-to-business communications); and to comply with legal, fiscal and accounting obligations (legal obligation).
4. Data retention
Enquiries that do not lead to an engagement are kept for one year from the last interaction. Data relating to an engagement are kept for its duration and for six years after it ends, as required by accounting and tax legislation in the United Kingdom and in Spain.
5. Data recipients and processors
We do not transfer personal data to third parties except where necessary to provide our services, to comply with legal obligations, or with your express consent. We rely on the following processors: Vercel Inc. (United States, with edge nodes in the European Union), which hosts this website and provides its cookieless audience measurement, and which is certified under the EU-US Data Privacy Framework and its UK Extension; GitHub, Inc. (United States), which stores the website's source files, not personal data of visitors, and which is certified under the same frameworks; and Google Ireland Limited, which provides our corporate email and document storage through Google Workspace, on infrastructure primarily based in the European Union, and which is certified under the same frameworks. Personal data may also be communicated to public authorities, courts and regulators where required by law.
6. International data transfers
Where a processor is established in the United States, the transfer is covered by its certification under the EU-US Data Privacy Framework and its UK Extension, or by standard contractual clauses and the UK International Data Transfer Addendum. Where additional processors are added in the future, we will ensure equivalent safeguards.
7. Your rights
You have the right to obtain confirmation as to whether we process your personal data and to access them; to request the correction of inaccurate or incomplete data; to request their deletion when they are no longer necessary or when you withdraw your consent; to request the restriction of processing; to receive your data in a structured, commonly used, machine-readable format; to object to processing based on legitimate interest; and to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise any of these rights, write to contact@pedrosa.uk with enough information to identify yourself and the right you wish to exercise. We will respond within one month, extendable by two further months in cases of particular complexity. You also have the right to lodge a complaint with the Information Commissioner's Office in the United Kingdom, at ico.org.uk, or with the Spanish Data Protection Agency, at aepd.es.
8. Security measures
We apply technical and organisational measures appropriate to the risk: multi-factor authentication on all corporate accounts, encryption of data in transit and at rest where supported by the processor, access limited to authorised persons on a need-to-know basis, and procedures for the detection, reporting and management of personal data breaches. In the event of a breach likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours of becoming aware of it and will inform you where the breach is likely to result in a high risk.
9. Automated decisions and minors
We do not carry out automated decision-making or profiling. Our services are directed at professional and institutional users, and we do not knowingly collect personal data of minors. If we become aware that such data have been collected, we will delete them as soon as possible.
10. Modifications
We may modify this Privacy Policy to reflect legal, organisational or sectoral changes. The current version is always the one published on this website.
11. Applicable law
This Privacy Policy is governed by the UK General Data Protection Regulation and the Data Protection Act 2018 and, in respect of Paloma Cap, S.L., by Regulation (EU) 2016/679 and Organic Law 3/2018. Any dispute arising from the processing of personal data shall be submitted to the courts of England and Wales, without prejudice to your right to lodge a complaint with the supervisory authority of your country of residence.
12. Contact
For any query or request relating to this Privacy Policy, write to contact@pedrosa.uk.
