Your privacy is important to us. This Privacy Statement explains what personal data we collect from our users and how we use it. We encourage you to read these terms carefully before providing your personal data on this website. Users over 14 years of age may register at www.theinvisibleflow.com as users without the prior consent of their parents or legal guardians.

In the case of minors under 14, the consent of parents or legal guardians is required for the processing of their personal data.

Under no circumstances will we collect from a minor data related to the professional or financial situation, or the privacy of other family members, without their consent.

If you are under 14 and you have accessed this website without informing your parents, you must not register as a user.

On this website, we respect and protect users’ personal data. As a user, you should know that your rights are guaranteed.

We have worked to create a safe and trustworthy space, and for that reason we want to share our principles regarding your privacy:

• We never request personal information unless it is truly necessary to provide the services you request.
• We never share our users’ personal information with anyone, except to comply with the law or when we have your express authorization.
• We will never use your personal data for a purpose other than what is stated in this Privacy Policy.

Please note that this Privacy Policy may change due to legislative or self-regulatory requirements, so users are advised to review it periodically. It will apply if users decide to complete any of the contact forms on which personal data is collected.

The Invisible Flow has adapted this website to comply with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons (GDPR), Organic Law 3/2018 of December 5 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), as well as Law 34/2002 of July 11 on Information Society Services and Electronic Commerce (LSSICE or LSSI).

Controller of your personal data

Controller identity: Elena Tur Sánchez

Trade name: The Invisible Flow

Tax ID (NIF/CIF): 48575700E

Address: 03560 El Campello (Alicante, SPAIN)

Email: flow@theinvisibleflow.com

Activity: Advertising and Email Marketing Agency

PURPOSE

For the purposes of the above GDPR, the personal data you send us through the website forms will be processed under the data processing category “Website users and subscribers.”

To process our users’ data, we implement all technical and organizational security measures required by applicable law.

Principles we apply to your personal information

When processing your personal data, we apply the following principles in line with European data protection requirements:

• Lawfulness, fairness, and transparency: We will always request consent to process your personal data for one or more specific purposes, which we will clearly explain in advance.
• Data minimization: We will only request data that is strictly necessary for the intended purposes, the minimum possible.
• Storage limitation: Data will be kept no longer than necessary for the processing purposes. Depending on the purpose, we will inform you of the applicable retention period. For subscriptions, we will periodically review the list and remove records that have been inactive for a considerable time.
• Integrity and conffidentiality: Your data will be processed in a way that ensures appropriate security and confidentiality. We take all necessary precautions

to prevent unauthorized access or misuse of our users’ data by third parties.

How have we obtained your data?

The personal data we process at The Invisible Flow comes from:

• Contact form

What rights do you have when you provide us with your data?

Anyone has the right to obtain confirmation as to whether The Invisible Flow is processing personal data concerning them.

Data subjects have the right to:

• Right of access: Data subjects may access their personal data.
• Right to rectiffication or erasure: Data subjects have the right to correct data provided to the controller. They also have the right to access their personal data or request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• Right to restriction of processing: In certain circumstances, data subjects may request the restriction of processing, in which case we will keep the data only for the exercise or defense of legal claims.
• Right to object: In certain circumstances, data subjects may request restriction of processing, in which case we will keep the data only for the exercise or defense of legal claims. Elena Tur Sánchez will stop processing the data unless there are compelling

legitimate grounds, or for the exercise or defense of potential claims.

• Right to data portability: You have the right to receive the personal data concerning you that you have provided to us, in a structured, commonly used, machine-readable format, and to transmit it to another controller when:
  • processing is based on consent,
  • the data has been provided by the data subject, and
  • processing is carried out by automated means. This allows you to obtain a copy of your data in electronic format and, in certain circumstances, request that it be communicated to another service provider. It only applies to computerized processing carried out with the user’s consent or to perform a contract.
• Right to withdraw consent: The data subject may withdraw consent at any time for processing based on consent.

Data subjects also have the right to effective judicial protection and to file a complaint with the supervisory authority, in this case the Spanish Data Protection Agency (Agencia Española de Protección de Datos), if they consider that the processing of their personal data violates the Regulation, at Calle Jorge Juan 6, 28001, Madrid. https://www.aepd.es.

For what purpose do we process your personal data?

When a user connects to this website, for example to comment on a post, send an email to the owner, subscribe, or purchase a service, they provide personal information for

which The Invisible Flow is responsible. This information may include personal data such as your IP address, name, physical address, email address, phone number, and other information. By providing this information, the user consents to their information being collected, used, managed, and stored by www.theinvisibleflow.com only as described in the Legal Notice and this Privacy Policy.

At The Invisible Flow, we have a system for capturing personal information and we process the information you provide for the following purpose:

• Contact form: We request the following personal data: name and email, to respond to requests from users of www.theinvisibleflow.com. For example, we may use this data to respond to your request and address questions, complaints, comments, or concerns you may have regarding the information on the website, services provided through the website, the processing of your personal data, matters related to the legal texts on the website, and any other queries you may have that are not subject to contracting conditions. We inform you that the data you provide will be hosted on servers of Klaviyo Inc. (The Invisible Flow’s provider) in the USA, declared to have an adequate level of protection by the European Commission, and TYPEFORM, SL. (The Invisible Flow’s provider) within the EU.

We also process your personal data for other purposes:

• To ensure compliance with the terms of use and applicable law. This may include developing tools and algorithms that help this website ensure the confidentiality of the personal data it collects.

• To support and improve the services we offer on this website.
• We also collect other non-identifying data obtained through certain cookies that are downloaded to the user’s computer when browsing this website, as detailed in the Cookie Policy.
• To manage social media. The Invisible Flow may have a presence on social networks. The processing of data of people who become followers on the official social media pages of The Invisible Flow will be governed by this section, as well as by the terms of use, privacy policies, and access rules of the relevant social network, accepted in advance by the user of www.theinvisibleflow.com. We process data to properly manage our presence on the social network, informing about activities, products, or services of www.theinvisibleflow.com, as well as any other purposes permitted by the social network’s rules. Under no circumstances do we use follower profiles on social media to send individual advertising.

In accordance with GDPR (EU) 2016/679 and Organic Law 3/2018 (LOPDGDD), Elena Tur Sánchez (The Invisible Flow), with address at 03560 El Campello (Alicante, SPAIN), Alicante, 03560, will be responsible for processing the data corresponding to “Website users and subscribers.”

The Invisible Flow does not sell, rent, or transfer personal data that could identify the user, and will not do so in the future, to third parties without prior consent. However, in some cases we may collaborate with other professionals. In such cases, users’ consent will be required, informing them of the collaborator’s identity and the purpose of the

collaboration. This will always be done under the strictest security standards.

We may select and publish customer testimonials in our Services, which may contain personally identifying information, such as the customer’s name and/or the city, state, or country where they live. We will obtain your consent before publishing any testimonial with your name. If such content is published, it will be available to other users of the Services. If you would like us to remove or delete your name or testimonial from our website, you can contact www.theinvisibleflow.com through our contact form.

We may publish customer reviews on our website or Services, which may contain personally identifying information, such as your name and/or the city, state, or country where you live. By submitting your review, you give permission for us to publish it on our Sites or Services. If you publish such content, it will be available to other users of the Sites or Services. Its publication may also become public and we cannot prevent that information from being used in a way that could violate this Policy or the law. If you want us to remove your name or review from our Sites or Services, you can contact www.theinvisibleflow.com through our contact form.

What is the legal basis for processing your data?

The legal basis for processing your data is the execution of the blog subscription requested by the user. The prospective offer of products and services is based on the consent requested from you, and in no case will withdrawal of that consent condition the execution of the subscription, unless the user requests to unsubscribe from this service.

How long will we keep your data?

The personal data provided will be kept:

• Until the data subject requests its deletion.

To which recipients will your data be disclosed?

Many tools we use to manage your data are contracted from third parties.

To provide services strictly necessary for the development of our activity, www.theinvisibleflow.com shares data with the following providers under their respective privacy terms.

All utilities offered by third parties are strictly necessary for the development of our activity and have been selected based on compliance with the rights we protect on this website.

The following companies will have access to the personal information necessary to perform their duties as data processors, but may not use it for other purposes. They must also process personal information in accordance with this Privacy Policy and applicable data protection laws.

• Google Analytics: a web analytics service provided by Google, Inc., a Delaware company with its principal office at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, United States (“Google”). Google Analytics uses cookies, which are text files placed on your computer, to help www.theinvisibleflow.com analyze how users use the website. The information generated by the cookie about your use of www.theinvisibleflow.com (including your IP address) will be directly transmitted to and stored by Google on servers in the United States.

●     Hosting:

OVH HISPANO, SLU, based in Spain. More information at: https://www.ovh.es (OVH HISPANO, SLU). OVH HISPANO, SLU processes data to provide hosting services to Elena Tur Sánchez.

●     Web platform:

The WordPress Foundation, based in the USA. More information at: https://wordpress.org (The WordPress Foundation). The WordPress Foundation processes data to provide web platform services to Elena Tur Sánchez.

●     Email marketing:

Klaviyo Inc., based in the USA. More information at: https://www.klaviyo.com/ (Klaviyo Inc.). Klaviyo Inc. processes data to provide email marketing services to Elena Tur Sánchez.

●     Chat communications:

Zoom Video Communications, Inc., based in the USA. More information at: https://zoom.us/ (Zoom Video Communications, Inc.). Zoom Video Communications, Inc. processes data to provide chat communication services to Elena Tur Sánchez.

●     Management:

TYPEFORM, SL., based in Spain. More information at: https://typeform.com (TYPEFORM, SL.). TYPEFORM, SL. processes data to provide management services to Elena Tur Sánchez.

Google, based in the USA. More information at: https://workspace.google.com/ (Google). Google processes data to provide management services to Elena Tur Sánchez.

Browsing

When browsing www.theinvisibleflow.com, non-identifiable data may be collected, including IP addresses, approximate geographic location, a record of how services and sites are used, and other data that cannot be used to identify the user. Non-identifying data also includes data related to your browsing habits through third-party services. This website uses the following third-party analytics services:

• Google Analytics
• Semrush
• Facebook Pixel

I use this information to analyze trends, manage the site, track users’ movements around the site, and gather demographic information about my user base as a whole. We use this information to analyze trends, manage the site, track users’ movements around the site, and gather demographic information about our user base as a whole.

Data secrecy and security

www.theinvisibleflow.com commits to the use and processing of users’ personal data, respecting confidentiality and using it according to its purpose, and to comply with its obligation to store it and adopt all measures to prevent alteration, loss, processing, or unauthorized access, in accordance with applicable data protection regulations.

This website includes an SSL certificate. This is a security protocol that ensures your data travels in an integral and secure manner, meaning the transmission of data between a server and the web user, and back, is fully encrypted.

www.theinvisibleflow.com cannot guarantee the absolute invulnerability of the Internet network and therefore cannot guarantee against data breaches through fraudulent access by third parties.

With regard to processing confidentiality, Elena Tur Sánchez will ensure that any person authorized by The Invisible Flow to process customer data (including staff, collaborators, and service providers) is subject to an appropriate confidentiality obligation (whether contractual or legal).

When a security incident occurs, once The Invisible Flow becomes aware of it, it must notify the Client without undue delay and provide timely information related to the Security Incident as it becomes known or when reasonably requested by the Client.

Data accuracy and truthfulness

As a user, you are solely responsible for the truthfulness and correctness of the data you submit to www.theinvisibleflow.com, releasing Elena Tur Sánchez (The Invisible Flow) from any responsibility in this regard. Users guarantee and are responsible, in any case, for the accuracy, validity, and authenticity of the personal data provided, and undertake to keep it properly updated. The user agrees to provide complete and correct information in the contact or subscription form.

Acceptance and consent

The user declares having been informed of the conditions on personal data protection, accepting and consenting to the processing of such data by Elena Tur Sánchez (The

Invisible Flow) in the manner and for the purposes indicated in this Privacy Policy.

Withdrawal

Consent provided, both for processing and for the transfer of data of data subjects, may be withdrawn at any time by notifying Elena Tur Sánchez (The Invisible Flow) under the terms established in this policy for exercising rights. Such withdrawal will not have retroactive effect.

Changes to the Privacy Policy

Elena Tur Sánchez may modify this Privacy Policy without prior notice whenever necessary to adapt it to any legislative, regulatory, case law, or administrative change, or to adapt to instructions issued by the Data Protection Agency or the legitimate interest of the controller. Any modification of this policy, without prejudice to the foregoing, will be published and indicated on the website.

For all these reasons, we recommend periodically reading these policies to stay informed of possible changes.

Commercial emails

In accordance with LSSICE, www.theinvisibleflow.com does not engage in SPAM practices, so we do not send commercial emails electronically that have not been previously requested or authorized by the user.

Consequently, in each of the forms on the website, the user has the option to give express consent to receive the newsletter, regardless of any commercial information requested on a one-off basis.

In accordance with Law 34/2002 on Information Society Services and Electronic Commerce and Article 66.1.b) of Law

13/2022 General Telecommunications Law, www.theinvisibleflow.com undertakes not to send commercial communications without properly identifying them.

Questions about this policy or your rights

If you have any questions or comments about this policy, or if you have concerns about how any personal information you provided may have been handled, you can contact us by mail or email at: flow@theinvisibleflow.com