Privacy Policy (EU/UK – GDPR)
Who we are (Data Controller)
This website is operated by Christine Fosberg (“we”, “us”).
Website: christinefosberg.com
Email: info@christinefosberg.com
Location: Spain
What data we collect
Depending on how you use the site, we may collect:
- Contact details (name, email, phone number) when you contact us or submit a form
- Booking / purchase details (what you booked, payment status, invoice details where applicable)
- Messages you send (contact form messages, emails, WhatsApp messages if you reach out that way)
- Basic technical data (IP address, device/browser info, pages visited) for security and performance
Why we use your data (and legal basis)
We process personal data only when we have a legal basis under GDPR, including:
- To respond to enquiries (legitimate interest; or steps prior to a contract)
- To deliver services you request (contract)
- To manage bookings, payments, and accounting (contract + legal obligation)
- To send marketing only if you opt in (consent). You can unsubscribe any time.
Who we share data with (service providers)
We may share personal data with trusted third-party providers that help us run the website and provide services (such as hosting/security, forms/registrations, communications, payments, and digital content delivery). We only share what is necessary and require providers to protect your information.
We do not sell your personal data.
International transfers
If you are located outside the EU/EEA (including the UK), your data may be processed in the EU and may be transferred internationally as described in this policy.
Some providers may process data outside the EU/EEA (including the United States). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses and/or other lawful transfer mechanisms.
Our website hosting is currently in the UK.
How long we keep your data
We keep personal data only as long as necessary for the purposes above, and longer where required by law (for example, bookkeeping/tax records). We then delete or anonymise it.
Your rights (EU/UK GDPR)
You may request:
- access to your data, correction, deletion
- restriction or objection to certain processing
- data portability (where applicable)
You can also withdraw consent at any time (for example, marketing emails).
To exercise your rights, email info@christinefosberg.com.
Complaints:
If you’re in Spain, you can lodge a complaint with the Agencia Española de Protección de Datos (AEPD).
If you’re in the UK, you can raise concerns with the Information Commissioner’s Office (ICO).
Cookies / analytics
We use essential cookies to ensure the website works properly and to help keep it secure. You can control cookies through your browser settings (including blocking or deleting cookies).
Children
This website is not intended for children under 14. If you believe a child has provided personal data, contact us and we will delete it where required.
Updates
We may update this policy from time to time. The latest version will always be posted on this page.
Last updated: 20th January 2026
