1. Data controller

The data controller responsible for your personal data is:

túatú PR
Email: info@tuatupr.com

If you have any questions about how we handle your data, please contact us at the address above.

2. Data we collect

Information you provide directly

When you use our website, place an order or contact us, we may collect:

• Name and surname
• Email address
• Phone number
• Company name and position
• Press release content, images and supporting materials you submit
• Payment information (processed securely by Stripe or PayPal — we do not store card details)
• Communications you send us via contact form, email or WhatsApp

Data collected automatically

When you visit our website, we may automatically collect:

• IP address and browser type
• Pages visited and time spent on each page
• Device type and operating system
• Referral source

3. Legal bases for processing

We process your personal data on the following legal bases under the GDPR (Regulation (EU) 2016/679):

• Contract performance: to provide the services you have purchased or requested
• Legitimate interests: to improve our website and services, prevent fraud and protect our legal rights
• Consent: where you have given explicit consent, for example to receive marketing communications
• Legal obligation: to comply with applicable laws and regulations

4. How we use your data

We use the personal data we collect to:

• Process and deliver your press release distribution orders
• Communicate with you about your orders, campaigns and account
• Provide access to your client area (My Results)
• Generate and deliver campaign reports
• Process payments and issue invoices
• Respond to enquiries and support requests
• Improve our website and services through analytics
• Send marketing communications where you have consented to receive them
• Comply with legal and regulatory obligations

5. Disclosure to third parties

We do not sell your personal data. We may share it with third parties only in the following circumstances:

• Service providers: payment processors (Stripe, PayPal), hosting providers, analytics tools and email platforms that support our operations
• Media partners: editorial media outlets receive the press release content you submit (name, company, contact details for journalists) as part of the distribution service
• Legal compliance: where required by law, court order or regulatory authority
• Business transfers: in the event of a merger, acquisition or sale of assets, your data may be transferred as part of that transaction

All third-party service providers are required to process your data in accordance with applicable data protection laws.

6. International transfers

Some of our third-party service providers may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as the European Commission’s standard contractual clauses, to protect your personal data in accordance with GDPR requirements.

7. Data retention

We retain your personal data for as long as necessary to provide our services and fulfil the purposes described in this policy, or as required by law. Order and invoice data is retained for the period required under Spanish tax law. When data is no longer needed, we delete or anonymise it securely.

8. Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: to request a copy of the personal data we hold about you
• Right to rectification: to request correction of inaccurate or incomplete data
• Right to erasure: to request deletion of your data, subject to legal retention obligations
• Right to restrict processing: to request that we limit how we use your data
• Right to data portability: to receive your data in a structured, machine-readable format
• Right to object: to object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at info@tuatupr.com. We will respond within one month.

You also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos — www.aepd.es).

9. Cookies

We use cookies and similar technologies to improve your experience on our website, understand how it is used and support our marketing activities. Please refer to our Cookie Policy for full details of the cookies we use and how to manage your preferences.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, disclosure or alteration. Payment data is processed through PCI-DSS compliant providers. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Minors

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us and we will delete it promptly.

12. Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Your continued use of our services after any changes constitutes acceptance of the revised policy. Where required by law, we will seek your explicit consent before making material changes.

14. Contact & complaints

For any questions, requests or complaints regarding this Privacy Policy or our data practices, please contact us:

túatú PR
Email: info@tuatupr.com

If you are not satisfied with our response, you have the right to complain to the Agencia Española de Protección de Datos (AEPD) at www.aepd.es.