Important notice: this text is a starting point adapted to Spanish data protection regulations (GDPR + LOPDGDD), not definitive legal advice. It must be reviewed by someone with legal training before being considered final, especially because Colibrí Origins is not yet formally incorporated as a company.

Art. 1 — Privacy rules

The General Data Protection Regulation (GDPR), Regulation (EU) 2016/679 of 27 April 2016, together with Spain’s Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), impose strict rules and conditions on companies and traders regarding the processing of personal data in order to protect privacy.

With this Privacy Statement, our aim is to provide you with clear and accurate information about the processing of your personal data.

Art. 2 — The data controller

The controller responsible for the processing of your personal data is:

    • Holder: [NOMBRE COMPLETO / RAZÓN SOCIAL]


    • Registered address: [DIRECCIÓN COMPLETA]


    • Contact email: administracion@colibriorigins.com

Art. 3 — Legal basis for the processing of data

We may only process your personal data for legitimate and necessary purposes (Art. 6 GDPR). This means that we process your personal data, whether electronically or otherwise, for legitimate contractual, commercial and security purposes. These purposes include, among others:

    • Requests for information, offers and potential leads.


    • Communications in the context of the performance of a contract or collaboration.

Art. 4 — What is personal data?

Personal data is any information relating to you that allows you to be identified. Anonymous data that prevents the identification of a person is not considered personal data. Your personal data may include, among others:

    • Data relating to your identity (name, surname, address, tax ID number, etc.).


    • Contact details (phone number, email address, etc.).


    • Financial data (bank account number, billing details).


    • Data relating to the performance of a contract or collaboration.


    • Data relating to the use of electronic devices when browsing the website.

Specially protected data: the processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, as well as the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, or data concerning a person’s sexual orientation or sex life, is prohibited. We are committed to strictly complying with this prohibition.

Art. 5 — Sources and origin of personal data

In all likelihood, the data comes directly from you, through this website’s contact form. If you do not wish to provide the requested data, you may lose the possibility of receiving a response to your inquiry.

Art. 6 — Access to personal data

Your personal data is normally for internal use only. For legitimate reasons, your personal data may be provided to third-party data processors (for example, technical service providers), always ensuring that they comply with the GDPR and the LOPDGDD through the corresponding data processing agreements (Art. 28 GDPR).

Art. 7 — Data retention period

We retain personal data for as long as necessary for the purposes described, and in any case within the legally required time limits.

Art. 8 — What are your rights?

We are committed to taking appropriate technical and organisational measures to ensure the security of the processing of personal data (Art. 32 GDPR).

    • Right of access (Art. 15 GDPR): you may request access to your personal data and obtain a copy of it.


    • Right to rectification (Art. 16 GDPR): you may request the correction of inaccurate or incomplete data.


    • Right to erasure / “to be forgotten” (Art. 17 GDPR) and right to restriction of processing (Art. 18 GDPR).


    • Right to object (Art. 21 GDPR) and right to data portability (Art. 20 GDPR).


    • Right to lodge a complaint (Art. 77 GDPR): with the Spanish Data Protection Agency (AEPD) — www.aepd.es.

To exercise any of these rights, please write to administracion@colibriorigins.com stating the right you wish to exercise and attaching a copy of a document proving your identity.

Art. 9 — What is our commitment?

Our goal is to implement technical and organisational security measures to protect stored data against unauthorised access, misuse, unlawful or accidental destruction, and involuntary loss.

Art. 10 — Procedure in the event of a security breach

If a data security breach occurs that poses a high risk to the rights and freedoms of data subjects, we will notify you without undue delay, and we will notify the AEPD within 72 hours of becoming aware of it, in accordance with Articles 33-34 of the GDPR.

Art. 11 — Your consent

By ticking the consent checkbox on our contact form, you give your explicit, informed and unambiguous consent to the processing of your personal data as described in this Privacy Statement. You have the right to withdraw your consent at any time by writing to administracion@colibriorigins.com.

Last updated: [FECHA]

Scroll to Top