Legal
Privacy policy
Draft for legal review. This text is a starting implementation based on EU and Spanish requirements. It does not replace legal advice and must be checked by a qualified professional before publication.
This policy explains which personal data Golden MorningStar S.L.U. processes through this website, why, on what legal basis, for how long, and what rights you have. It follows the EU General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 (LOPDGDD).
Who is responsible
The controller is Golden MorningStar S.L.U., Av. de Paris 14 C, Benidorm, Spain, CIF ES B72451735. Contact for privacy matters: David@GoldenMorningStar.eu.
What we collect, and why
Contact form and business review requests
Name, company, email address, optional phone number, your message and your preferred contact method. We use them only to answer your request and, if you ask for it, to prepare a proposal.
Legal basis: steps taken at your request before entering into a contract (GDPR art. 6(1)(b)).
AI assistant
If you choose to pass a request to David through the assistant, it asks for your name, company, type of business, the problem you want to solve, your email address, an optional phone number and your preferred contact method. Details are only passed on after you confirm. The assistant does not make decisions about you.
Legal basis: your request and confirmation (GDPR art. 6(1)(b)). [When the live AI engine is connected, name the AI provider below and describe what is sent to it.]
Email and phone
If you contact us directly, we process your contact details and the content of your message to answer you.
Technical data
When you visit the website, our hosting provider processes technical data such as your IP address and browser information to deliver the site securely and protect forms against abuse. Legal basis: our legitimate interest in running a secure website (GDPR art. 6(1)(f)).
We do not
- sell personal data;
- use your data for advertising profiles;
- send marketing messages without your separate consent.
How long we keep data
Enquiries are kept for as long as needed to handle them. If no business relationship follows, they are deleted within 12 months. If you become a client, data is kept for the duration of the relationship and afterwards for the periods required by Spanish tax and commercial law. [Retention periods proposed; confirm.]
Service providers
We use carefully selected processors bound by data processing agreements:
- Cloudflare: website hosting, security and bot protection;
- Namecheap (Private Email): email hosting;
- [AI provider for the assistant, once connected]
Where a provider processes data outside the European Economic Area, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
Your rights
You can ask for access to, correction of, or deletion of your data, ask us to restrict or stop processing, request data portability, and withdraw consent at any time. Write to David@GoldenMorningStar.eu. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es.
Security
The website is served over HTTPS. Form input is validated, protected against automated abuse and never stored in the browser. Access to enquiries is limited to Golden MorningStar.