PRIVACY Policy

This policy expresses, in detail, how your personal data and the information you provide to EL OBRADOR DE LO REAL SLU are treated, in order to protect your privacy in accordance with the provisions of Regulation (EU) 2016/679, General Data Protection – hereinafter, RGPD – and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights – hereinafter, LOPD-GDD-.

1. ACCEPTANCE AND CONSENT

Likewise, by providing your data through electronic channels, you guarantee that you are over 14 years of age and that the data provided is true, accurate, complete and updated. For these purposes, you confirm that you are responsible for the veracity of the data communicated and that you will keep said information conveniently updated so that it responds to your real situation, making you responsible for any false and inaccurate data that you may provide, as well as for any direct or indirect damages that may arise.

By accepting this Privacy Policy, you give your express, informed, free and unequivocal consent so that the Data you provide, and to which the security, technical and organizational measures provided for in current regulations are applied, are processed by EL OBRADOR DE LO REAL SLU as the data controller.

2. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

Owner: EL OBRADOR DE LO REAL SLU,

Trade name: DOCTHINKS

NIF: B04974010

Address: Passatge Guillem de Torrella 1, 2ºG, – 07002 Palma (Balearic Islands) SPAIN

Email: info@docthinks.com

Website: docthinks.com/

3. GENERAL PRINCIPLES APPLICABLE TO THE PROCESSING OF PERSONAL DATA

EL OBRADOR DE LO REAL SLU will process the personal data of clients and users in accordance with the principles established by the European Data Protection Regulation, which are explained below:

• Principle of “legality, transparency and loyalty”, which consists of the data being processed in a lawful, fair and transparent manner for the interested party.
• Principle of “purpose” which implies that the data will be processed for one or more specific, explicit and legitimate purposes, which are indicated in point 6 of this Policy.
• Principle of “data minimization”, which means that DOCTHINKS will only process the data that is necessary for each of the specific purposes of the processing, limiting the retention period and its accessibility as necessary.
• Principle of “accuracy”, by virtue of which DOCTHINKS undertakes to have reasonable measures to ensure that the data is updated, and that it is deleted or modified without delay when it is inaccurate with respect to the purposes for which it is processed.
• Principle of “limitation of the conservation period” to the time that corresponds to fulfill the purposes of each treatment. These deadlines are indicated in point 8 of this Policy. Once these purposes have been achieved, the data will be deleted, blocked or, failing that, anonymized (that is, devoid of any element that allows the interested parties to be identified).
• “Security” principle, which implies the establishment by DOCTHINKS of the necessary technical and organizational measures to guarantee the integrity, availability and confidentiality of the personal data it processes.
• Principle of “active responsibility” or “demonstrated responsibility” that obliges DOCTHINKS, as responsible, to maintain due diligence to protect and guarantee the rights and freedoms of the natural persons whose data is processed.

4. WHAT PERSONAL DATA IS COLLECTED ON THIS WEBSITE?

In accordance with the GDPR and the principles detailed above, only those data that are appropriate, relevant and limited to what is necessary in relation to the purposes for which they are available may be processed, which in turn must be: determined, explicit and legitimate (I will provide you with information about these purposes later).

DOCTHINKS collects and processes the personal data detailed below, the collection of which will depend on the different services requested on this Website:

• Identification data: name and surname and ID.
• Contact information: email, address and telephone number.
• Personal data: year of birth, country of birth and country and city of residence (in case of registration with the Community).
• Contractual and billing data: contractual transaction data, purchased services, payment data.
• Navigation data: IP address, type and identification of the device, type of browser, domain through which you access the Website, navigation data, activity on the Website. To know clearly and precisely the cookies we use, you can consult the Cookies Policy.

5. HOW IS THIS PERSONAL DATA COLLECTED? CAPTURE SYSTEMS

DOCTHINKS collects your personal information through different forms (mainly contact and registration), but you will always be informed at the time of collection, through information clauses, about the person responsible for the treatment, the purpose and legal basis of the same, the recipients of the data and the retention period of your information, as well as the way in which you can exercise the rights that assist you in terms of data protection.

In any case, in the next sections, reference is made to these elements.

In addition, DOCTHINKS uses social networks to offer content and interact with you. The information collected through the messages and communications you post may contain personal information that is available online and accessible to the public. These social networks have their own privacy policies explaining how they use and share your information, so it is recommended that you consult them before using them, to confirm that you agree with the way your information is collected, processed and shared.

Through this website, DOCTHINKS collects personal information related to your browsing through the use of cookies. To know clearly and precisely the cookies it uses, what their purposes are and how you can configure or disable them, consult the Cookies Policy.

6. FOR WHAT PURPOSES ARE YOUR DATA PROCESSED?

After telling you what data is collected and through what means of capture, the purpose for which said information is used is detailed below.

DOCTHINKS puts different forms at your disposal, using the information collected in each of them as follows:

• Contact form: for questions, suggestions or professional contact. In this case, the name and email address and/or telephone number will be used to respond to queries and send the information that the user requires through the website.
• Registration form: The data is processed to manage access to the Community and the different user profiles (Basic, Academy and Pro), allowing the use of the website’s functionalities, including the publication of films and projects. They will also be processed to manage the purchase of programs, products and/or services offered on the platform, as well as payment and all related operations, such as sending follow-up emails, responses, receipts and invoices.
  Once you have registered in the Community and acquired membership status, you will have other forms at your disposal to use different functionalities, such as including in Staff, adding a movie or uploading a project. In these cases, the contact data of the users involved will be processed to manage requests and notifications, as well as the information necessary to validate the publication of content by consulting public sources.

Additionally, in the case of Pro profiles, access to contact details of other Pro members will be allowed for professional networking purposes.

Likewise, personal data may be communicated to collaborators of El Obrador, in its capacity as owner of the DOCTHINKS project, when it is necessary for the management and development of the platform, participation in activities organized by the Controller, or for said collaborators to consider the profiles of users who have given their express consent, in order to participate in joint projects or receive information of interest to them.

7. ON WHAT LEGAL BASIS IS THIS DATA PROCESSED?

DOCTHINKS processes your personal data with the following legal bases:

• The execution of a contract with DOCTHINKS, for the contracting and management of products and/or services.
• The application of pre-contractual measures, to respond to your request for information or send commercial information that refers to services similar to those that were contracted.
• The user’s consent in relation to the sending of commercial communications; by DOCTHINKS or its collaborators.
• The legitimate interest of the person responsible for the treatment to be able to offer the customer service requested, and to protect the users of the docthinks.com/ website from abuse and fraud in the use of my products and/or services.

8. HOW LONG IS THE DATA KEPT?

DOCTHINKS will only retain your information for the period of time necessary to fulfill the purpose for which it was collected, comply with the legal obligations imposed on it and address any possible responsibilities that may arise from compliance with the purpose for which the data was collected.

Specifically, the following deadlines are established depending on the type of data in question:

• Customer Data: As a general rule, we will keep your personal information as long as there is a contractual relationship that binds us or you do not exercise your right to deletion and/or limit processing.

In any case, the information will be blocked without use beyond its conservation, and only as long as it may be necessary for the exercise or defense of claims or some type of legal liability may arise that must be addressed. The most common legal deadlines are:

– 4 years: Law on Infractions and Sanctions in the Social Order (obligations regarding membership, registrations, cancellations, contributions, payment of salaries…); Arts. 66 et seq. General Tax Law (accounting books…).

– 5 years: Art. 1964 of the Civil Code (personal actions without special term).

– 6 years: Art. 30 of the Commercial Code (accounting books, invoices…).

– 10 years: Art. 25 of the Law on the Prevention of Money Laundering and Financing of Terrorism.

• Subscriber data: From when the user subscribes until they unsubscribe.
• Data of potential non-subscribing clients: the data will be kept in any case for the duration of the established commercial relationship and, once concluded, two years, and will be deleted after said period if a contractual relationship has not been formalized or at the time you request it.

9. WHAT ARE YOUR RIGHTS REGARDING THE USE OF YOUR DATA? HOW CAN YOU EXERCISE THEM?

The Law grants you a series of rights as the owner of the personal data processed by DOCTHINKS, which are the following:

• Right of access to your personal data.
• Right to request rectification of inaccurate data.
• Right to request deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• Right to request the limitation of the processing of your data, in which case DOCTHINKS will only keep it for the exercise or defense of claims.
• Right to object to the processing of your data.
• Right to request the portability of your personal data to another controller when technically possible.
• Right not to be subject to automated individual decisions.

You also have the option to unsubscribe from any of the subscription services provided by DOCTHINKS.

These rights are characterized by the following:

• Its exercise is free of charge, unless the requests are manifestly unfounded or excessive (e.g. repetitive nature), in which case DOCTHINKS may charge a fee proportional to the administrative costs incurred or refuse to act.
• You can exercise your rights directly or through your legal or voluntary representative.
• DOCTHINKS must respond to your request within one month, although, taking into account the complexity and number of requests, the deadline may be extended by another two months.
• This party has the obligation to inform you about the means to exercise these rights, which must be accessible and without being able to deny you the exercise of the right for the sole reason of choosing another means. If the request is submitted by electronic means, the information will be provided by these means when possible, unless you ask me to do otherwise.
• If DOCTHINKS does not process the request, it will inform you, within one month at the latest, of the reasons for the lack of action and the possibility of complaining to a Control Authority.

In order to facilitate its exercise, below is the link to the website of the Spanish Data Protection Agency where you can find additional information, as well as links to the application form for each of the rights: https://www.aepd.es/es/derechos-y-deberes/conoce-tus-derechos

Likewise, the consent given, both for the treatment and for the transfer of the data of the interested parties, is revocable at any time, by communicating it to DOCTHINKS in the terms established in this section. This revocation will in no case be retroactive.

To exercise your rights, DOCTHINKS puts at your disposal the following means:

1. By written and signed request addressed to EL OBRADOR DE LO REAL SLU, Passatge Guillem de Torrella 1, 2ºG, – 07002 Palma (Balearic Islands). E-mail: info@el-obrador.com, indicating as Ref. Exercise of LOPD Rights.

2. Sending a scanned and signed form to the email address info@el-obrador.com, indicating in the subject Exercise of LOPD Rights.

In both cases, you must prove your identity by accompanying a copy of your DNI or equivalent document, in order to verify that only the interested party is responded to. If you present your application through a legal representative, you must also provide a document proving the representation.

Likewise, and especially if you consider that you have not obtained full satisfaction in the exercise of your rights, you can file a claim with the national control authority, addressing for these purposes the Spanish Data Protection Agency, C/ Jorge Juan, 6 – 28001 Madrid.

10. TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?

In general, DOCTHINKS does not share your personal information, except for those transfers that must be made based on imposed legal obligations. In the case of being transferred to a third party, you will be informed in advance and your consent will be requested.

Although this is not a transfer of data per se, in order to provide you with the requested service, third parties, which act as DOCTHINKS suppliers, may access your information to carry out the service that DOCTHINKS has contracted from them (for example, web development and maintenance company, hosting company, payment processing services, order processing, analysis, marketing campaign management, website management, and email distribution and other similar service providers). These managers access your data following the instructions of the person responsible and without being able to use it for a different purpose and maintaining the strictest confidentiality.

Likewise, your personal information will be available to Public Administrations, Judges and Courts, for the attention of possible responsibilities arising from the treatment.

In compliance with the principles of information and transparency, you are informed of the third parties that may access your data as data processors:

• WordPress: CMS platform run by the company Automattic Inc., based in San Francisco, California, USA, and with the designated controller for the processing of personal data for Europe Aut O’Mattic A8C Ireland Ltd., located at Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86, Ireland. Automattic Inc. adheres to the decision on adequacy for the circulation of EU-US data “Data Privacy Framework” adopted by the European Commission on 07/10/2023. Here you have access to its privacy policy: https://automattic.com/privacy/
• Ionos: provides an email server, through the company IONOS Cloud S.L.U., with address at Avenida de la Vega, 1 Edificio Veganova 3 Planta 5 Puerta C Alcobendas 28108 Madrid, Spain. You can consult their privacy policy here: https://www.ionos.es/terms-gtc/politica-de-privacidad/
• Google – Provides cloud storage, forms, and web analytics services. These services are provided by the company Google LLC, based in Mountain View, California, USA, and with a designated controller for the processing of personal data in the European Economic Area and Switzerland Google Ireland Limited, a company established and operating under the laws of Ireland (with registration number: 368047). Google LLC adheres to the adequacy decision for the circulation of EU-US data “Data Privacy Framework” adopted by the European Commission on 07/10/2023. You can consult their privacy policy here https://policies.google.com/privacy?hl=es
• Dropbox: provides cloud storage services through the company of the same name, located in San Francisco (United States), and adheres to the adequacy decision for the circulation of EU-US data “Data Privacy Framework” adopted by the European Commission on 07/10/2023. You can consult their privacy policy at the following link: https://www.dropbox.com/es_ES/privacy
• Asana: tool used for the organization and management of projects, whose company Asana Inc. is located at 633 Folsom Street, Suite 100, San Francisco, CA, 94107-3600, adhered to the adequacy decision for the circulation of EU-US data “Data Privacy Framework” adopted by the European Commission on 07/10/2023. You can obtain more information about their privacy policy here: https://asana.com/es/terms#privacy-policy
• Paypal: online payment processing platform, used to collect payments for our services. This platform is run by the company PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal L-2449, Luxembourg. You can consult their privacy policy here: https://www.paypal.com/es/webapps/mpp/ua/privacy-full?locale.x=es_ES#16
• Meta Pixel: tool used to obtain information from Website Users for marketing purposes. This service, in Europe, is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square Grand Canal Harbor Dublin 2, Ireland. Likewise, the company Meta Platforms, Inc. adheres to the decision on adequacy for the circulation of EU-US data “Data Privacy Framework” adopted by the European Commission on 07/10/2023. You can consult its privacy policy here https://www.facebook.com/privacy/policy/
• Vimeo: video hosting tool run by the company Vimeo.com, Inc., located at 330 West 34th Street, 10th Floor, New York, NY 10001 (United States), which adheres to the adequacy decision for the circulation of EU-US data “Data Privacy Framework” adopted by the European Commission on 07/10/2023. You can consult their Privacy Policy here: https://vimeo.com/privacy

11. SEGMENTATION AND PROFILE PREPARATION

The registration of personal data provided at the time of registration to the Community, interaction with the website and any other data provided during navigation, including the information provided by cookies in relation to browsing habits, will be used in order to be segmented or categorized with the purpose of applying them to the activity related to general administration management, information, analysis of proposals requested by users/clients, statistical study of the services and content used, tastes and preferences, and surveys or forms.

Profiling, through the analysis of your individual automated decisions, consists of the use of your Personal Data to evaluate certain personal aspects, such as the analysis and prediction of your economic situation, personal preferences, interests, behavior, location, movements and attitudes. The logic applied to obtain these profiles is the use of statistical procedures. The consequence of this processing of your data by creating profiles is the sending of personalized communications of interest to you.

The legal basis for the processing of your data for the indicated purposes and the preparation of automated individual decisions by creating profiles, is the consent granted by checking the box “I agree to receive personalized commercial communications” on the subscription forms, or by expressly accepting advertising cookies.

The data used in profiling and shown to advertisers is not data that allows users to be identified, but only the type of audience, their age, country, gender, etc. will be shown in a graph.

12. SOCIAL PLUGINS

At docthinks.com/ you have links to the social network Instagram. If you click on it, it will redirect you to said application, outside of this website, so the privacy policy of this social network will be applicable: https://www.facebook.com/help/instagram/519522125107875

13. INTERNATIONAL DATA TRANSFERS

This party has contracted services from suppliers located outside the European Economic Area (“Third Countries”). Through this policy DOCTHINKS declares that it proceeds to carry out (in such cases) the relevant international transfers to be able to carry out the service/functionality that you have requested, safeguarding at all times the security of your data and ensuring that they meet the data protection requirements contained in the RGPD.

These suppliers have signed the corresponding confidentiality and data processing contracts required by regulations for suppliers located in Third Countries, applying the necessary guarantees and safeguards to preserve your privacy. Such guarantees and safeguards consist of adequacy decisions of the European Commission, standard contractual clauses (SSCs) approved by the European Commission or other legal mechanisms permitted by the GDPR.

14. HOW IS YOUR INFORMATION PROTECTED?

DOCTHINKS is committed to protecting your personal information; for which it uses measures, controls and procedures of a physical, organizational and technological nature, reasonably reliable and effective, aimed at preserving the integrity and security of your data and guaranteeing your privacy.

In the case of the contracts that DOCTHINKS signs with suppliers, clauses are included in which they are required to maintain the duty of secrecy with respect to the personal data to which they have had access by virtue of the assignment carried out, as well as to implement the technical and organizational security measures necessary to guarantee the confidentiality, integrity, availability and permanent resilience of the systems and services for processing personal data.

This website includes an SSL certificate. This is a security protocol that ensures that your data travels completely and safely; That is, the transmission of data between a server and the web user, and in feedback is fully encrypted or encrypted.

However, absolute security cannot be guaranteed and there is no security system that is impenetrable, so in the event of any information being processed and under the control of DOCTHINKS being compromised as a result of a security breach, said person responsible will take the appropriate measures to investigate the incident, notify the Control Authority and, where appropriate, those users who may have been affected so that they can take appropriate measures.

15. CHANGES IN THE PRIVACY POLICY

DOCTHINKS reserves the right to modify this policy to adapt it to legislative or jurisprudential developments, as well as industry practices. In such cases, you will be informed through the website or through other means, so that you can learn about the new privacy conditions introduced.

This Privacy Policy was last updated on 03/17/2025.