Legal

Decoded HR — Terms of Use & Privacy Policy

Last updated: August 2025

Part 1 — Terms of Use

1. About This Website

This website is operated by Decoded HR, an independent HR consulting practice owned and managed by Paulina Coronado Sandoval, registered in Spain.

By accessing and using this website (decoded-hr.com), you agree to these Terms of Use. If you do not agree, please do not use this site.

2. Services Described

The services described on this website — including HR consulting, interim HR leadership, HR advisory, executive coaching, psychological assessments, and learning and development — are professional services provided by Paulina Coronado Sandoval trading as Decoded HR.

The content on this website is for information purposes only. It does not constitute a binding offer or contract. Any engagement of services requires a separate written agreement between Decoded HR and the client.

3. Intellectual Property

All content on this website — including text, design, graphics, logos, and the Decoded HR brand — is the property of Paulina Coronado Sandoval unless otherwise stated.

You may not copy, reproduce, distribute, modify, or use any content from this site for commercial purposes without prior written permission from Decoded HR.

You may share links to this website and reference its content for personal or professional purposes, provided you credit Decoded HR as the source.

4. Accuracy of Information

Decoded HR makes reasonable efforts to ensure the information on this website is accurate and up to date. However, no warranty is given regarding the completeness, accuracy, or suitability of the information for any particular purpose.

The tools, systems, and platforms listed on this website reflect professional experience and familiarity. Their inclusion does not imply any formal partnership, certification, or endorsement by those platforms unless explicitly stated.

5. Third-Party Links

This website may contain links to third-party websites, including LinkedIn and partner platforms. Decoded HR is not responsible for the content, privacy practices, or accuracy of any third-party website. Accessing external links is at your own risk.

6. Limitation of Liability

To the fullest extent permitted by applicable law, Decoded HR shall not be liable for any direct, indirect, incidental, or consequential loss or damage arising from your use of this website or reliance on its content.

This includes but is not limited to loss of data, loss of business, or any interruption to service caused by technical issues beyond our reasonable control.

7. Governing Law

These Terms of Use are governed by the laws of Spain. Any disputes arising from the use of this website shall be subject to the exclusive jurisdiction of the courts of Málaga, Spain.

8. Changes to These Terms

Decoded HR reserves the right to update these Terms of Use at any time. Changes will be posted on this page with an updated date. Continued use of the website after changes are posted constitutes acceptance of the revised terms.

Part 2 — Privacy Policy

1. Who We Are

Data controller: Paulina Coronado Sandoval, trading as Decoded HR. Contact: via the contact form on this website. Website: decoded-hr.com. Location: Málaga, Spain.

This Privacy Policy explains how Decoded HR collects, uses, stores, and protects your personal data when you visit this website or use the contact form.

This policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Spanish Organic Law on Data Protection (LOPDGDD) 3/2018.

2. What Data We Collect

Data you provide voluntarily: when you submit the contact form on this website, we collect:

• Your name
• Your company name (if provided)
• Your email address
• The type of service you are enquiring about
• The content of your message

We do not collect payment information, sensitive personal data, or any data beyond what you voluntarily submit through the contact form.

Data collected automatically: this website may collect standard technical data through hosting and analytics tools, including:

• IP address
• Browser type and version
• Pages visited and time spent
• Referring URL

This data is collected in aggregated, anonymised form and is used solely to understand general website usage and improve performance. It is not used to identify individual visitors.

3. How We Use Your Data

The personal data you submit through the contact form is used exclusively to:

• Respond to your enquiry
• Assess whether and how Decoded HR can assist you
• Follow up on a potential professional engagement

We do not use your data for marketing purposes, automated decision-making, or profiling. We do not add you to any mailing list without your explicit consent.

4. Legal Basis for Processing

Under GDPR, we process your personal data on the following legal bases:

• Legitimate interest — to respond to your enquiry and assess a potential professional relationship
• Pre-contractual measures — when your enquiry relates to a specific service engagement
• Consent — where you have explicitly provided information and agreed to be contacted

5. Data Retention

We retain the personal data submitted through the contact form for as long as is necessary to respond to your enquiry and, if applicable, to manage a professional engagement.

If no professional relationship is established following initial contact, your data will be deleted within 12 months of your enquiry.

If a professional engagement is established, data related to that engagement will be retained for the period required by applicable Spanish and EU law, typically 5 years from the end of the engagement for contractual and tax compliance purposes.

6. Data Sharing

Decoded HR does not sell, rent, or share your personal data with third parties for commercial purposes.

Your data may be shared with the following categories of processors solely to operate this website and manage communications:

• Form processing service (Formspree or equivalent) — to route contact form submissions to our email inbox. These processors are GDPR-compliant and do not store your data beyond what is technically necessary to transmit it.
• Website hosting provider (Lovable / hosting infrastructure) — for the technical operation of this website.

All third-party processors used by Decoded HR are required to handle your data in accordance with GDPR and applicable data protection law.

We will only disclose your data to authorities or third parties if required to do so by law.

7. Cookies

This website uses only the cookies strictly necessary for its technical operation. We do not use advertising cookies, tracking cookies, or third-party analytics cookies that identify you individually.

If this changes in the future, this policy will be updated and a cookie consent banner will be implemented before any non-essential cookies are set.

8. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal data:

• Right of access — You can request a copy of the personal data we hold about you.
• Right to rectification — You can request that we correct any inaccurate or incomplete data.
• Right to erasure — You can request that we delete your personal data, subject to legal retention obligations.
• Right to restriction of processing — You can request that we limit how we use your data in certain circumstances.
• Right to data portability — You can request your data in a structured, commonly used, machine-readable format.
• Right to object — You can object to the processing of your data where we rely on legitimate interest as our legal basis.
• Right to withdraw consent — Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us using the contact form on this website. We will respond within 30 days of receiving your request.

If you are not satisfied with our response, you have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos — AEPD) at aepd.es.

9. Data Security

Decoded HR takes reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration.

These measures include secure form transmission, access controls, and use of GDPR-compliant third-party processors.

However, no method of electronic transmission or storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

10. International Transfers

This website is operated from Spain and is primarily intended for use within the European Economic Area (EEA). If you access this website from outside the EEA, please be aware that your data may be processed within the EEA.

If any data processors used by Decoded HR transfer data outside the EEA, such transfers are conducted under appropriate safeguards as required by GDPR, including Standard Contractual Clauses.

11. Children's Privacy

This website is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a minor has submitted personal data through this website, please contact us and we will delete it promptly.

12. Changes to This Privacy Policy

Decoded HR may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated policy will be posted on this page with a revised date at the top.

We encourage you to review this policy periodically. Continued use of this website after changes are posted constitutes acceptance of the updated policy.

13. Contact

For any questions, requests, or concerns regarding this Privacy Policy or your personal data, please use the contact form on this website.

Decoded HR — Paulina Coronado Sandoval, Málaga, Spain, decoded-hr.com